Tag: npm

Malicious npm package deal sneaks into GitHub Actions builds

In style JavaScript library expr-eval susceptible to RCE flaw

Malicious npm packages include Vidar infostealer

Malicious packages in npm evade dependency detection by way of invisible URL hyperlinks: Report

First Malicious MCP Server Discovered Stealing Emails in Rogue Postmark-MCP Package deal

Wave of npm provide chain assaults exposes hundreds of enterprise developer credentials

Prettier-ESLint npm packages hijacked in a complicated provide chain assault

Vital Open VSX Registry Flaw Exposes Tens of millions of Builders to Provide Chain Attacks

Hackers booby lure NPM with cross-language imposter packages

Ripple’s xrpl.js npm Bundle Backdoored to Steal Non-public Keys in Main Provide Chain Attack