New granular access tokens allow NPM package maintainers to restrict which packages, scopes, and organizations a token has access to. Looking to improve the safety and security of NPM JavaScript ...
Shai-Hulud cyberattack targets more than 25,000 npm projects, stealing developers' credentials.
The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, ...
Regtech firm SlowMist noted that recently, the NPM ecosystem experienced another large-scale package poisoning incident.
The latest attack from the self-replicating npm-package poisoning worm can also steal credentials and secrets from AWS, ...
Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback