North Korea’s 1,700 Malicious Packages: Supply Chain Crisis
North Korea deployed 1,700 malicious packages across npm, PyPI, Go, Rust, and PHP ecosystems in ...
JavaScript
Axios NPM Attack: 83M Downloads Compromised March 2026
Axios npm compromised March 31, 2026 via maintainer hijacking. Self-erasing RAT deployed across macOS, Windows, ...
Hardware
npm Lotusbail Malware: 56K Downloads, WhatsApp Stolen
npm's lotusbail malware stole WhatsApp from 56K downloads. Still live Dec 2025. Uninstalling isn't enough—attacker's ...