npm | byteiota

Tag: npm

Digital network visualization showing the Miasma supply chain worm propagating through Microsoft Azure GitHub repositories, with warning symbols and lock icons on a dark blue background

News

Miasma Worm Hits 73 Azure GitHub Repos — AI Agents Now Targeted

The Miasma supply chain worm disabled 73 Microsoft Azure GitHub repos in 105 seconds on ...

By ByteBot

June 7, 2026

News

node-redis 6.0: RESP3 Default and What to Do Now

node-redis 6.0 makes RESP3 the default protocol, bumps the Node.js minimum to 20, and adds ...

By ByteBot

June 5, 2026

Microsoft MXC SDK dashboard showing AI agent sandboxing policy configuration on Windows

AI & Development

Microsoft MXC SDK: Sandbox Your AI Agents on Windows

Microsoft's MXC SDK lets you sandbox AI agents at the OS level with a JSON ...

By ByteBot

June 4, 2026

News

Miasma Attack Poisons 32 Red Hat npm Packages — And SLSA Didn’t Help

Miasma attack hit 32 Red Hat npm packages, 117K weekly downloads. SLSA provenance attestations passed ...

By ByteBot

June 2, 2026

npm package box with warning symbol surrounded by compromised nodes representing the Mini Shai-Hulud worm attack on TanStack packages

News

TanStack npm Attack: The Worm That Forged SLSA Provenance

The Mini Shai-Hulud worm hit 42 TanStack npm packages in a six-minute window and produced ...

By ByteBot

May 31, 2026

Cybersecurity illustration showing npm supply chain attack targeting CI/CD credentials

Developer Tools

npm Typosquatting: 14 Packages Steal Your AWS and CI/CD Secrets

14 malicious npm packages impersonating OpenSearch and ElasticSearch stole AWS credentials, Vault tokens, and CI/CD ...

By ByteBot

May 31, 2026

npm staged publishing workflow with 2FA approval gate protecting against supply chain attacks

News

npm Staged Publishing: The 2FA Gate the TanStack Attack Made Necessary

npm 11.15.0 ships staged publishing with a mandatory 2FA approval gate — the defense designed ...

By ByteBot

May 29, 2026

npm staged publishing diagram showing CI/CD pipeline with 2FA approval gate to prevent supply chain attacks

Developer Tools

npm Staged Publishing: The 2FA Gate Against Supply Chain Attacks

npm 11.15.0 introduced staged publishing - a mandatory 2FA approval gate between your CI/CD pipeline ...

By ByteBot

May 26, 2026

Interconnected package boxes representing npm, PyPI, and Crates.io supply chain attack with a broken lock and warning symbol on dark blue background

Security

TrapDoor Supply Chain Attack: npm, PyPI, and Crates.io Hit (2026)

TrapDoor malware hit 34 packages across npm, PyPI, and Crates.io — and uses invisible Unicode ...

By ByteBot

May 25, 2026

PHP and npm logos connected by a broken chain link representing a cross-ecosystem supply chain attack on Packagist packages via package.json postinstall hooks

News

Packagist Attack Hid Malware in package.json — 8 PHP Packages Hit

Eight Packagist PHP packages including devdojo/wave were compromised via a postinstall script hidden in package.json. ...

By ByteBot

May 24, 2026

1...345 6

Tag: npm

Posts navigation

Categories

Latest Posts