Technology ❯ Software Development ❯ Open Source Software ❯ Package Management

NPM

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

The company is re-signing apps to prevent attackers from abusing exposed certificates.

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging