Technology ❯ Software Development ❯ Package Management

npm Packages

Vulnerabilities Infected Packages Malicious Packages Credential Harvesting Malicious Payloads

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

The install-time worm steals developer and cloud credentials and can republish packages, forcing immediate secret rotation and forensic hunts.

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens