Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

Most JavaScript developers are familiar with the npm package manager, which was originally developed by Isaac Schlueter. What many probably don’t know is that npm is also a company co-founded by ...

A new cyberattack is silently targeting crypto from users during transactions amid an incident that security researchers ...

According to Guillemet, the malicious code — already pushed into packages with over 1 billion downloads — is designed to ...

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

Less $50 worth of crypto has been stolen from the large-scale JavaScript libraries attack on Monday, which targeted Ethereum ...

Hackers launched the largest NPM crypto attack in history and compromised 18 JavaScript packages with billions of downloads.