Technology ❯ Software Development ❯ Package Management ❯ npm

Security Vulnerabilities

Miasma Worm Backdoors Dozens of Red Hat npm Packages

The install-time malware harvests developer and cloud credentials and is driving urgent secret rotation and audits of developer and CI environments.

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage