Malicious NPM Package Caught Mimicking Material Tailwind CSS PackageThe Hacker News·Sep 24, 04:54 UTC · Sep 24, 2022Vulnerability142
Researchers Uncover Rust Supply Chain Attack Targeting Cloud CI PipelinesThe Hacker News·May 21, 03:11 UTC · May 21, 2022Malware42
Over a Dozen Malicious NPM Packages Caught Hijacking Discord ServersThe Hacker News·Dec 9, 07:02 UTC · Dec 9, 2021Malware42
Malicious NPM Libraries Caught Installing Password Stealer and RansomwareThe Hacker News·Oct 28, 07:05 UTC · Oct 28, 2021Ransomware57
Code Execution Bug Affects Yamale Python Package — Used by Over 200 ProjectsThe Hacker News·Oct 7, 11:50 UTC · Oct 7, 2021VulnerabilityCVE-2021-3830547
Several Malicious Typosquatted Python Libraries Found On PyPI RepositoryThe Hacker News·Jul 30, 08:18 UTC · Jul 30, 2021Malware42
Dependency Confusion: Another Supply-Chain VulnerabilitySchneier on Security·Mar 15, 13:39 UTC · Mar 15, 2021Vulnerability42
Dependency Confusion Supply-Chain Attack Hit Over 35 HighThe Hacker News·Feb 10, 12:57 UTC · Feb 10, 2021Vulnerability42