Malicious node-ipc npm Packages Trigger New Supply Chain Security Alarm
Researchers found malicious node-ipc tarballs containing a credential stealer that exfiltrated sensitive developer data via DNS TXT queries.
Tag: npm Package
North Korea’s Lazarus Group Behind the Axios npm Supply Chain Attack
On Monday, the Axios npm supply chain attack came to light where malicious packages had been inserted into one of ...
Q1 2026 Threat Reports
❮
❯