Charles Guillemet, CTO at the crypto wallet platform Ledger, warned the crypto community to be cautious while executing ...

Popular npm packages debug, chalk, and others hijacked in massive supply chain attack Crims have added backdoors to at least ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

The credential stealer harvested username, password, and 2FA codes before sending them to a remote host. With full access, ...

Hackers are now exploiting vulnerabilities in widely-used NPM coding libraries to inject malware into Ethereum smart ...

Investigations into the Nx "s1ngularity" NPM supply chain attack have unveiled a massive fallout, with thousands of account ...

Two npm packages hide downloader commands via Ethereum smart contracts; uploaded July 2025; targeting crypto developers.

A successful phishing attack against a developer has resulted in one of the largest supply chain compromises to date, adding ...

The popular Nx build system, boasting 4 million downloads each week, was exploited in the first supply chain breach to use AI ...

Npm (Node.js Package Manager) devs say the npm command-line interface (CLI) client is impacted by a security bug -- a combination between a file traversal and an arbitrary file (over)write issue.