Npm Package Hijacked to Steal Data and Crypto via AIInfosecurity Magazine·Aug 29, 12:30 UTC · Aug 29, 2025Data breach57
GlassWorm Attack Uses Stolen GitHub Tokens to ForceThe Hacker News·Mar 21, 07:03 UTC · Mar 21, 2026Data breach57
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD CredentialsThe Hacker News·May 19, 09:12 UTC · May 19, 2026Data breach57
Self-Replicating Worm Hits 180+ Software PackagesKrebs on Security·Sep 15, 00:00 UTC · Sep 15, 2025Data breach257
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer MachinesThe Hacker News·Jul 20, 05:15 UTC · Jul 20, 2026Data breach157
IronWorm and New Miasma Worm Variant Hit npm in Supply Chain AttacksThe Hacker News·Jun 6, 06:23 UTC · Jun 6, 2026Data breach57
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe ContinuesThe Hacker News·Jun 10, 04:50 UTC · Jun 10, 2026Data breach157
Mini Shai-Hulud Hits Hundreds of npm Packages in AntV EcosystemInfosecurity Magazine·May 20, 15:00 UTC · May 20, 2026Data breach57
Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer TokensThe Hacker News·Apr 24, 17:03 UTC · Apr 24, 2026Data breach157
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer SecretsThe Hacker News·Mar 11, 12:57 UTC · Mar 11, 2026Data breachCVE-2026-2835360
Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain AttackThe Hacker News·Sep 22, 15:17 UTC · Sep 22, 2025Data breach157
Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attackHelp Net Security·Sep 16, 00:00 UTC · Sep 16, 2025Data breach57