npm security | byteiota

Tag: npm security

npm package backdoor supply chain attack illustration with blue circuit board and cracked lock on dark background

News

jscrambler npm Backdoored: Rotate Your Credentials Now

The jscrambler npm package was backdoored five times on July 11, 2026. Five malicious versions ...

By ByteBot

3 days ago

AI coding agent hallucinating package names leading to supply chain attack — slopsquatting concept illustration

Security

Slopsquatting: Your AI Coding Agent Is Now a Supply Chain Risk

AI coding agents hallucinate package names — and attackers register them. Here is how slopsquatting ...

By ByteBot

July 4, 2026

Autonomous AI agent robots breaching developer CI/CD pipeline infrastructure with circuit-board patterns on dark blue background

News

AI Agents Are Now Hacking Developer Infrastructure

Two 2026 attacks — Hackerbot-Claw (GitHub Actions) and the Mastra npm compromise by North Korean ...

By ByteBot

June 30, 2026

Security

OpenAI macOS Update Deadline: ChatGPT, Codex Break June 26

OpenAI revokes macOS code-signing certificates June 26. ChatGPT Desktop, Codex CLI, and Atlas stop launching ...

By ByteBot

June 20, 2026

Security

npm’s Phantom Gyp Worm Proves Signed Packages Aren’t Safe

The Miasma worm hit 57 npm packages in 5 days using a binding.gyp trick that ...

By ByteBot

June 8, 2026

News

Miasma Attack Poisons 32 Red Hat npm Packages — And SLSA Didn’t Help

Miasma attack hit 32 Red Hat npm packages, 117K weekly downloads. SLSA provenance attestations passed ...

By ByteBot

June 2, 2026

GlassWorm malware worm targeting VS Code extensions and developer tools

Security

GlassWorm Botnet Taken Down: Audit Your Developer Environment Now

CrowdStrike and Google took down the GlassWorm botnet on May 26. Your machine may still ...

By ByteBot

May 29, 2026

News

TrapDoor: The Supply Chain Attack That Hijacks Your AI

TrapDoor planted 34 malicious packages across npm, PyPI, and Crates.io — then used zero-width Unicode ...

By ByteBot

May 29, 2026

npm staged publishing diagram showing CI/CD pipeline with 2FA approval gate to prevent supply chain attacks

Security

npm Staged Publishing: The 2FA Gate Against Supply Chain Attacks

npm 11.15.0 introduced staged publishing - a mandatory 2FA approval gate between your CI/CD pipeline ...

By ByteBot

May 26, 2026

Interconnected chain of compromised developer tools showing npm to VS Code to GitHub attack cascade

News

TeamPCP Supply Chain Attack: How npm Poisoned GitHub

TeamPCP's three-stage supply chain cascade hit TanStack, Nx Console, and GitHub's 3,800 repos in 6 ...

By ByteBot

May 24, 2026

Tag: npm security

Posts navigation

Categories

Latest Posts