Technology ❯ Software Development ❯ Package Management ❯ NPM

Malicious Packages

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Stolen maintainer credentials let the worm ship install-time stealers that raid developer and CI secrets.

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

Self-Publishing 'IndonesianFoods' Worm Floods npm With More Than 100,000 Spam Packages

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2