When ‘minimal impact’ isn’t reassuring: lessons from the largest npm supply chain compromiseCyberScoop·Sep 15, 13:21 UTC · Sep 15, 2025Exploit / PoC in the wild60
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New StoriesThe Hacker News·Jun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-20230160
Phylum integrates with Sumo Logic to identify software supply chain attacksHelp Net Security·Dec 7, 00:00 UTC · Dec 7, 2023Exploit / PoC60
Cybercriminals Target Ethereum Developers with Fake Hardhat npm PackagesThe Hacker News·Jan 6, 11:09 UTC · Jan 6, 2025Vulnerability55