A seven-year malicious browser extension campaign infected 4.3 million Google Chrome and Microsoft Edge users with malware, ...
A popular JavaScript cryptography library is vulnerable in a way which could allow threat actors to break into user accounts.
ShadyPanda abused browser extensions for seven years, turning 4.3M installs into a multi-phase surveillance and hijacking ...
The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a ...
Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...
A vulnerability in the 'node-forge' package, a popular JavaScript cryptography library, could be exploited to bypass ...
Regtech firm SlowMist noted that recently, the NPM ecosystem experienced another large-scale package poisoning incident.
One-Click Publishing Eliminates the Gap Between AI Code Generation and Live Deployment San Francisco, CA – November 26, 2025 ...
PostHog says the Shai-Hulud 2.0 npm worm compromise was "the largest and most impactful security incident" it's ever experienced after attackers slipped malicious releases into its JavaScript SDKs and ...
NeoGames, an innovative game developer based in Seoul, announced that it has launched its innovative multi-puzzle farming ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback