Although it is just three years old, Node.js is gaining traction as an application development platform, letting developers ...
A cryptocurrency thief got into the npm account of a hard-working developer via spearphishing. node.js packages with billions ...
Bun is an ambitious project that is quickly emerging as a drop-in replacement and faster alternative to Node.js. Here's a look at ...
Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...
It is possible that the attackers behind this attack are the same ones as last time. Their malicious code bears the name of a prominent science fiction monster.
An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...
Security researchers worldwide are warning about a supply-chain attack on the Node Package Manager (NPM), where a ...
Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.