Technology ❯ Software Development ❯ Open Source Software ❯ Package Management

npm Packages

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

The new variant executes during npm's preinstall stage to harvest developer and CI/CD credentials.

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages