Technology ❯ Software Development ❯ Open Source Software ❯ Package Management

npm

ChainDrop Worm Infects Hundreds of npm Packages

Stolen GitHub credentials let poisoned releases run a Bun‑launched infostealer that harvests developer and cloud secrets, repackages them, and propagates through npm.

7 ARTICLES

2mo ago

OpenAI Rotates Mac Signing Certificates, Sets May 8 Update Deadline After Axios Hack

12 ARTICLES

5mo ago

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

29 ARTICLES

5mo ago

Axios npm Package Hijacked to Drop RATs as Google Links Attack to UNC1069

13 ARTICLES

10mo ago

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

18 ARTICLES

last yr.

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

42 ARTICLES

last yr.

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage

npm

ChainDrop Worm Infects Hundreds of npm Packages

Injective SDK Npm Release Backdoored to Steal Wallet Keys

Rust Stealer IronWorm and New Miasma Worm Infect Dozens of npm Packages

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

OpenAI Rotates Mac Signing Certificates, Sets May 8 Update Deadline After Axios Hack

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

Axios npm Package Hijacked to Drop RATs as Google Links Attack to UNC1069

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage