The security team behind the "npm" repository for JavaScript libraries removed two npm packages this Monday for containing malicious code that installed a remote access trojan (RAT) on the computers ...
New granular access tokens allow NPM package maintainers to restrict which packages, scopes, and organizations a token has access to. Looking to improve the safety and security of NPM JavaScript ...
A second wave of the Shai-Hulud supply-chain attack has struck the npm software ecosystem, affecting more than 25,000 ...
The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, ...
The latest attack from the self-replicating npm-package poisoning worm can also steal credentials and secrets from AWS, ...
"As a new and significantly more aggressive wave of npm supply chain malware, Shai-Hulud 2 combines stealthy execution, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback