ChainDrop Worm Hits 400 npm Packages with Two Billion Monthly InstallsInfosecurity Magazine·Aug 5, 10:00 UTC · Aug 5, 2026Malware30
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code HooksThe Hacker News·Aug 4, 15:03 UTC · Aug 4, 2026Malware142
AWS Blames North Korean Group for npm Supply Chain AttacksInfosecurity Magazine·Jul 31, 09:50 UTC · Jul 31, 2026Malware42
Malware ships with bugs that defenders could use against itHelp Net Security·Jul 1, 03:09 UTC · Jul 1, 2026Malware42
PRevent: Open-source tool to detect malicious code in pull requestsHelp Net Security·Feb 24, 09:13 UTC · Feb 24, 2025Malware42