NPM Packages

2 min read

Researchers from Checkmarx detailed about a threat actor leveraging NPM packages to target developers...

2 min read

Researchers have discovered malicious packages on the npm and PyPi open-source registries, which could...

1 min read

Researchers have discovered an attack campaign named Lofylife that uses malicious npm packages, targeting...

1 min read

Researchers have discovered a supply chain attack that uses packages hosted on the Node...

2 min read

GitHub plans to introduce MFA as a mandatory requirement for any user who contributes...

2 min read

Researchers at Aqua’s Team Nautilus published a security advisory on the issue of hijacking...

2 min read

A trio of tools released by JFrog, to prevent malicious packages from slipping into...

2 min read

Researchers discovered 17 malicious packages in the NPM (Node.js package manager) repository that were...