Threat actors injected malicious code into multiple popular NPM packages after their maintainers fell for a well-crafted ...
On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...
"debug" package attack failed; malicious update detected early, minimal impact. Developers urged to check their installations ...
Ledger CTO urged hardware wallet users to verify every transaction amid a large-scale supply chain attack. Analysts warned ...
According to ReversingLabs' 2025 Software Supply Chain Security Report, 14 of the 23 crypto-related malicious campaigns in ...
Security experts have warned that a newly discovered supply chain attack targeting npm packages is still active and may ...
Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...
Charles Guillemet, CTO at the crypto wallet platform Ledger, warned the crypto community to be cautious while executing ...
According to Guillemet, the malicious code — already pushed into packages with over 1 billion downloads — is designed to ...