Browsing Tag
NPM
10 posts
Supply Chain Attack Hits Rspack, Vant npm Packages with Monero Miner
Popular npm packages, Rspack and Vant, were recently compromised with malicious code. Learn about the attack, the impact, and how to protect your projects from similar threats.
Year-Long Malware Campaign Exploits NPM to Attack Roblox Developers
A year-long malware campaign targets Roblox developers using fake NPM packages mimicking “noblox.js” to steal data. Despite takedowns,…
Trojanized jQuery Infiltrates npm, GitHub, and CDNs: Thousands of Packages at Risk
Phylum uncovers large-scale trojanized jQuery attacks targeting npm, GitHub, and CDNs. Malicious actors steal user form data through…
New Protestware Uses npm Packages to Call for Peace in Gaza and Ukraine
Apart from displaying these messages, the packages performed no other actions. This indicates that these aren't malicious per se.
OpenSSF Launches Malicious Packages Repository
The launch of the Malicious Packages repository comes at a time when cyberattacks, leveraging malicious open source packages, are on the rise.
NPM Typosquatting Attack Deploys r77 Rootkit via Legitimate Package
Another day, another NPM typosquatting attack.
FortiGuard Labs Uncovers Series of Malicious NPM Packages Stealing Data
There are over 17 million developers worldwide who use NPM packages, making it a lucrative target for cybercriminals.
Luna Grabber Malware Hits Roblox Devs Through npm Packages
The campaign, which began at the start of August 2023, revolves around malicious packages impersonating the legitimate noblox.js,…
Global CDN Service ‘jsdelivr’ Exposed Users to Phishing Attacks
In the interconnected world of web development, open-source components play a vital role, facilitating collaboration and code sharing…
CISA warns of trojanized versions of JavaScript library’s NPM package
The warning comes days after three rogue packages, okhsa, klow, and klown discovered by DevSecOps firm Sonatype, were removed from the NPM repository.