Search: “npm”

42 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 336 Vulnerability 198 Ransomware 82 Threat actor 81 Data breach 60 Exploit / PoC 51 Industry 28 Phishing & fraud 23 AI safety & security 17 Policy & legal 11 AI tools & infra 9 Tools 8 Research 7 Advisory 7

SeverityAll critical 241 high 485 medium 133 low 34 info 28

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Malware1

55

Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

The Hacker NewsSep 6, 11:31 UTC · Sep 6, 2025Malware

55

North Korea-linked actors spread XORIndex malware via 67 malicious npm packages

Security AffairsJul 15, 09:48 UTC · Jul 15, 2025Malware

55

10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux

The Hacker NewsOct 29, 08:34 UTC · Oct 29, 2025Malware

55

Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers

The Hacker NewsSep 4, 09:51 UTC · Sep 4, 2025Malware1

55

Malicious package with AdaptixC2 framework agent found in npm registry

Kaspersky SecurelistOct 17, 10:00 UTC · Oct 17, 2025Malware

55

Malicious npm packages target Ethereum developers

Security AffairsJan 4, 23:53 UTC · Jan 4, 2025Malware

55

Bogus npm Packages Used to Trick Software Developers into Installing Malware

The Hacker NewsApr 27, 13:56 UTC · Apr 27, 2024Malware1

55

Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

The Hacker NewsJan 19, 07:42 UTC · Jan 19, 2024Malware

55

48 Malicious npm Packages Found Deploying Reverse Shells on Developer Systems

The Hacker NewsNov 6, 16:38 UTC · Nov 6, 2023Malware1

55

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

The Hacker NewsJun 12, 19:35 UTC · Jun 12, 2026Malware

55

Software supply chain attacks are getting easier

Help Net SecurityJan 24, 00:00 UTC · Jan 24, 2024Malware

55

Week in review: Self-spreading npm malware hits developers, Cisco SD-WAN 0-day exploited since 2023

Help Net SecurityMar 1, 00:00 UTC · Mar 1, 2026Malware in the wildCVE-2026-25108 CVE-2026-201271

60

⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware in the wildCVE-2026-11645 CVE-2026-2441 CVE-2026-3909+23 CVEs1

60

⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More

The Hacker NewsApr 6, 12:46 UTC · Apr 6, 2026Malware in the wildCVE-2026-5281 CVE-2026-3502 CVE-2026-35616+1 CVEs

60

North Korea Targets Crypto Devs Through NPM Packages

Infosecurity MagazineFeb 13, 10:15 UTC · Feb 13, 2025Malware

55

⚡ Weekly Recap: MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & More

The Hacker NewsDec 31, 05:07 UTC · Dec 31, 2025Malware in the wildCVE-2025-14847 CVE-2020-12812 CVE-2025-68664+7 CVEs2

60

N. Korean Hackers Used Job Lures, Cloud Account Access, and Malware to Steal Millions in Crypto

The Hacker NewsAug 10, 12:09 UTC · Aug 10, 2025Malware

55

ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories

The Hacker NewsApr 2, 15:07 UTC · Apr 2, 2026Malware CVE-2026-2699 CVE-2026-2701

60

⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909 CVE-2026-3910 CVE-2026-3913+40 CVEs2

60

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

10 Credential Stealing Python Libraries Found on PyPI Repository

The Hacker NewsAug 10, 05:22 UTC · Aug 10, 2022Malware

55

Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked to Steal AWS Keys

The Hacker NewsMay 26, 02:35 UTC · May 26, 2022Malware1

55

⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More

The Hacker NewsFeb 9, 12:59 UTC · Feb 9, 2026Malware CVE-2026-25049 CVE-2026-0709 CVE-2026-23795+23 CVEs1

60

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

The Hacker NewsDec 10, 07:33 UTC · Dec 10, 2025Malware CVE-2025-55182

60

Here’s how carefully concealed backdoor in fake AWS files escaped mainstream notice

Ars Technica · SecurityJul 15, 00:00 UTC · Jul 15, 2024Malware

55

Cryptomining Malware Found in Popular Open Source Packages

Infosecurity MagazineDec 23, 16:30 UTC · Dec 23, 2024Malware

55

Agentic attack chains advance as infostealers flood criminal markets

Help Net SecurityJun 19, 12:05 UTC · Jun 19, 2026Malware in the wild

60

⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more

The Hacker NewsJun 10, 04:47 UTC · Jun 10, 2026Malware in the wildCVE-2025-6543 CVE-2025-5777 CVE-2025-49825+23 CVEs

60

CrowdStrike disrupts Glassworm botnet that preyed on open

CyberScoopMay 27, 14:16 UTC · May 27, 2026Malware in the wild1

60

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year

The Hacker NewsApr 9, 16:23 UTC · Apr 9, 2026Malware CVE-2024-32114 CVE-2026-34197 CVE-2022-416781

60

Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

The Hacker NewsMar 25, 14:32 UTC · Mar 25, 2026Malware CVE-2026-336341

60

Malicious NuGet Package Targets Stripe Developers

Infosecurity MagazineFeb 25, 13:00 UTC · Feb 25, 2026Malware1

55

Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery

The Hacker NewsFeb 12, 06:21 UTC · Feb 12, 2026Malware in the wildCVE-2025-0108 CVE-2024-41713 CVE-2024-10914+2 CVEs

60

⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

The Hacker NewsJan 26, 16:53 UTC · Jan 26, 2026Malware CVE-2025-59718 CVE-2025-59719 CVE-2026-240611

60

Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code

The Hacker NewsJan 1, 10:11 UTC · Jan 1, 2026Malware

55

GlassWorm malware has resurfaced on the Open VSX registry

Security AffairsNov 10, 20:06 UTC · Nov 10, 2025Malware

55

⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

The Hacker NewsAug 5, 04:38 UTC · Aug 5, 2025Malware in the wildCVE-2025-40596 CVE-2025-40597 CVE-2025-40598+8 CVEs

60

Malicious Open Source Packages Surge 188% Annually

Infosecurity MagazineJul 8, 11:00 UTC · Jul 8, 2025Malware

55

Thai Officials Targeted in Yokai Backdoor Campaign Using DLL Side

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2024Malware CVE-2017-118821

60