On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

Earlier this week, the Npm package manager suffered what may be its worst security incident to date. Unknown cybercriminals ...

Multiple npm packages have been compromised by a phishing attack in an attempt to spread crypto malware to billions of victims.