Massive npm Supply Chain Attack Hits AntV Ecosystem; Hundreds of JavaScript Packages Compromised
A major software supply chain attack has compromised hundreds of widely used npm packages tied to the AntV ecosystem, exposing ...
Tag: npm
Shai-Hulud Returns with ‘Golden Path’ Malware in Latest NPM Supply Chain Attack
Weeks after the devastating "Second Coming" campaign crippled thousands of development environments, the threat actor behind the Shai-Hulud worm has ...
New Shai-Hulud Attack Hits Nearly 500 npm Packages with 100+ Million Downloads
A new Shai-Hulud supply chain attack has hit nearly 500 npm packages with a total of 132 million monthly downloads. ...
Malicious Typosquatted npm Packages Deliver Cross-Platform Credential Stealer, Researchers Warn
Typosquatted npm packages disguised as popular libraries auto-run on install, stealing credentials across Windows, macOS, and Linux systems.
Q1 2026 Threat Reports
❮
❯
Latest Cyber News
Web Stories
