Technology ❯ Software Development ❯ Package Management ❯ npm

Security Vulnerabilities

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

The new variant executes during npm's preinstall stage to harvest developer and CI/CD credentials.

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage