Search: “npm”

33 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 336 Vulnerability 198 Ransomware 82 Threat actor 81 Data breach 60 Exploit / PoC 51 Industry 27 Phishing & fraud 23 AI safety & security 17 Policy & legal 11 AI tools & infra 9 Tools 8 Advisory 7 Research 6

SeverityAll critical 241 high 485 medium 133 low 34 info 26

PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun

Security AffairsJan 28, 08:43 UTC · Jan 28, 2026Exploit / PoC1

60

When ‘minimal impact’ isn’t reassuring: lessons from the largest npm supply chain compromise

CyberScoopSep 15, 13:21 UTC · Sep 15, 2025Exploit / PoC in the wild

60

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device

The Hacker NewsJun 18, 15:29 UTC · Jun 18, 2026Exploit / PoC CVE-2026-20127

60

The npm incident frightened everyone, but ended up being nothing to fret about

CyberScoopSep 10, 14:35 UTC · Sep 10, 2025Exploit / PoC in the wild

60

Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited

Help Net SecurityApr 5, 00:00 UTC · Apr 5, 2026Exploit / PoC in the wildCVE-2026-35616 CVE-2026-21643 CVE-2026-20093+2 CVEs1

60

Zapier exploit chain shows how known anti-patterns compose into critical risk

Help Net SecurityMay 28, 00:00 UTC · May 28, 2026Exploit / PoC

60

Malicious AI Agent Server Reportedly Steals Emails

Infosecurity MagazineSep 25, 16:30 UTC · Sep 25, 2025Exploit / PoC

60

A little-known npm package was North Korea’s warm

CyberScoopJul 29, 21:09 UTC · Jul 29, 2026Exploit / PoC in the wild

60

⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI

The Hacker NewsJan 20, 09:20 UTC · Jan 20, 2026Exploit / PoC CVE-2025-29824 CVE-2025-2775 CVE-2025-2776+19 CVEs

60

Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code

The Hacker NewsJan 26, 16:53 UTC · Jan 26, 2026Exploit / PoC CVE-2025-69264 CVE-2025-69263

60

⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More

The Hacker NewsNov 17, 12:37 UTC · Nov 17, 2025Exploit / PoC in the wildCVE-2025-64446 CVE-2025-64740 CVE-2025-64741+24 CVEs

60

Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access

The Hacker NewsDec 21, 09:00 UTC · Dec 21, 2024Exploit / PoC CVE-2024-41713 CVE-2024-35286 CVE-2024-55550+3 CVEs

60

Massive supply-chain attack compromises 440 packages under four hours

CyberScoopAug 4, 22:07 UTC · Aug 4, 2026Exploit / PoC

60

ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories

The Hacker NewsApr 24, 04:36 UTC · Apr 24, 2026Exploit / PoC CVE-2026-27175 CVE-2026-27174 CVE-2025-22952+1 CVEs

60

Infosecurity's Top 10 Cybersecurity Stories of 2025

Infosecurity MagazineJan 1, 08:30 UTC · Jan 1, 2026Exploit / PoC in the wildCVE-2024-55591

60

Week in review: Cisco ASA zero-day vulnerabilities exploited, Fortra GoAnywhere instances at risk

Help Net SecuritySep 28, 00:00 UTC · Sep 28, 2025Exploit / PoC CVE-2025-10035 CVE-2025-59689 CVE-2025-26399+1 CVEs

60

Critical Gems Takeover Bug Reported in RubyGems Package Manager

The Hacker NewsMay 11, 02:45 UTC · May 11, 2022Exploit / PoC in the wildCVE-2022-29176

60

Week in review: Attackers exploiting VMware RCE, Microsoft fixes actively exploited zero-day

Help Net SecurityApr 17, 00:00 UTC · Apr 17, 2022Exploit / PoC in the wildCVE-2022-24521 CVE-2022-26904 CVE-2022-26809+1 CVEs

60

Suppliers, logins, and AI tools are all becoming attack paths

Help Net SecurityAug 6, 00:00 UTC · Aug 6, 2026Exploit / PoC in the wild1

60

⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

The Hacker NewsJul 28, 05:26 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-16232 CVE-2025-66376 CVE-2026-54121+52 CVEs

60

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast

Help Net SecurityApr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-341971

60

U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog

Security AffairsMar 12, 08:46 UTC · Mar 12, 2026Exploit / PoC in the wildCVE-2025-68613

60

CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities

The Hacker NewsJan 23, 15:24 UTC · Jan 23, 2026Exploit / PoC in the wildCVE-2025-68645 CVE-2025-34026 CVE-2025-31125+1 CVEs

60

Open-source security group pulls out of U.S. grant, citing DEI restrictions

CyberScoopOct 29, 20:55 UTC · Oct 29, 2025Exploit / PoC in the wild1

60

Security Affairs newsletter Round 520 by Pierluigi Paganini

Security AffairsApr 20, 16:14 UTC · Apr 20, 2025Exploit / PoC in the wildCVE-2025-30406 CVE-2025-24054 CVE-2021-20035

60

U.S. CISA adds Oracle WebLogic Server and Mitel MiCollab flaws to its Known Exploited Vulnerabilities catalog

Security AffairsJan 8, 06:58 UTC · Jan 8, 2025Exploit / PoC in the wildCVE-2020-2883 CVE-2024-41713 CVE-2024-55550

60

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan]

The Hacker NewsJan 6, 12:05 UTC · Jan 6, 2025Exploit / PoC CVE-2024-49113 CVE-2024-491121

60

Network Attack Trends: February

Palo Alto Unit 42Jun 6, 12:33 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-25296 CVE-2021-25297 CVE-2021-25298+4 CVEs

60

Phylum integrates with Sumo Logic to identify software supply chain attacks

Help Net SecurityDec 7, 00:00 UTC · Dec 7, 2023Exploit / PoC

60

North Korean Hackers Exploit Zero-Day Bug to Target Cybersecurity Researchers

The Hacker NewsSep 8, 16:50 UTC · Sep 8, 2023Exploit / PoC CVE-2021-34514 CVE-2022-21881

60

New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures

The Hacker NewsSep 27, 04:39 UTC · Sep 27, 2021Exploit / PoC CVE-2021-37344 CVE-2021-37346 CVE-2021-37350+8 CVEs1

60

Open Source Supply Chain Attacks Surge 430%

Infosecurity MagazineAug 13, 09:53 UTC · Aug 13, 2020Exploit / PoC in the wild

60

Surge in cyber attacks targeting open source software projects

Help Net SecurityAug 13, 00:00 UTC · Aug 13, 2020Exploit / PoC in the wild

60