In a newly discovered supply chain attack, attackers last week targeted a range of npm-hosted JavaScript type testing ...

It has been a busy week for supply-chain attacks targeting open source software available in public repositories, with ...

Further dissection has determined that over 3,500 websites have been ensnared in the sprawling illicit crypto mining effort, with the domain hosting the JavaScript miner also linked to Magecart credit ...

DLL-based malware targets Windows users after a phishing campaign tricked the maintainer into leaking a token.

The "is" package was infected with cross-platform malware after a scam targeting maintainers The popular npm package "is" was ...