North Korea’s 1,700 Malicious Packages: Supply Chain Crisis
North Korea deployed 1,700 malicious packages across npm, PyPI, Go, Rust, and PHP ecosystems in ...
AI & Development
Claude Code Source Leak: 500K Lines Exposed via npm
Anthropic accidentally leaked 500,000 lines of Claude Code‘s internal source code on March 31, 2026, ...
Security
Axios NPM Attack: 83M Downloads Compromised March 2026
Axios npm compromised March 31, 2026 via maintainer hijacking. Self-erasing RAT deployed across macOS, Windows, ...
Security
NPM Supply Chain Attack Targets AI Coding Assistants
Your AI Assistant Might Be Stealing Your Secrets A sophisticated npm supply chain attack is ...
Hardware
npm Lotusbail Malware: 56K Downloads, WhatsApp Stolen
npm's lotusbail malware stole WhatsApp from 56K downloads. Still live Dec 2025. Uninstalling isn't enough—attacker's ...