Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...
An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.
A large-scale, automated typosquatting attack saw 200+ malicious packages flood the npm code repository, targeting popular Azure scopes. Researchers have found hundreds of malicious packages in the ...
According to researchers Andrey Polkovnychenko and Shachar Menashe, the repositories were first detected on March 21 and steadily grew from roughly 50 malicious npm packages to over 200 in a matter of ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback