Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers ...
Red Hat hit by npm supply‑chain attack - here's how to stay safe ...
Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.
A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...
JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.
Microsoft links the recent Mastra AI npm supply chain attack to , a North Korean group known for cryptocurrency theft ...
The popular Mastra AI framework, used to build artificial intelligence agents, workflows and retrieval-augmented generation ...
With npm v12, GitHub closes a central attack vector: installation scripts from dependencies will only run after explicit approval from July 2026.
Official Red Hat NPM accounts have been compromised and used to push a malicious worm that spreads from machine to machine, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results