NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by ...

Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to ...

On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

Multiple npm packages have been compromised by a phishing attack in an attempt to spread crypto malware to billions of ...

According to Guillemet, the malicious code — already pushed into packages with over 1 billion downloads — is designed to silently swap crypto wallet addresses in transactions. That means unsuspecting ...

NPM supply chain attack compromised 18 popular JavaScript packages, swapping crypto wallet addresses, but quick detection ...

A major supply chain attack on the NPM repository briefly threatened crypto users worldwide. Malicious code was pushed into ...