On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

A new digital supply chain attack has targeted popular open-source npm packages with at least two billion downloads per week. On Sept. 8, Josh Junon, a package maintainer whose account was at the ...

The newly surfaced Salty@FA phishing kit shows attackers can sidestep multi-factor authentication by cloaking attacks in ...

An escalating npm supply chain attack has compromised dozens of foundational JavaScript packages to spread malware and drain ...