Technology ❯ Software Development ❯ Package Management

Node Package Manager

JavaScript Ecosystem Credential Theft Malicious Dependencies npm npm Packages Malicious Packages

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Stolen maintainer credentials let the worm ship install-time stealers that raid developer and CI secrets.

Axios npm Package Briefly Trojanized After Maintainer Account Takeover