Technology ❯ Software Development ❯ Package Management ❯ npm

Malicious Packages

TrapDoor Supply-Chain Campaign Uses npm, PyPI and Crates.io to Steal Developer Credentials

Socket reports the operation captures crypto wallets and cloud and GitHub credentials by manipulating AI coding assistants to reveal secrets.

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Axios npm Package Hijacked to Drop RATs as Google Links Attack to UNC1069

npm Worm 'SANDWORM_MODE' Exposed Targeting Developer and CI Secrets Through Typosquatted Packages

Microsoft Removes 19 Malicious VS Code Extensions After Supply-Chain Campaign Exposed

Shai-Hulud 2.0 Exposes 400,000 Developer Secrets Across NPM and GitHub

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2