Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code HooksThe Hacker News·Aug 4, 15:03 UTC · Aug 4, 2026Malware142
AWS Blames North Korean Group for npm Supply Chain AttacksInfosecurity Magazine·Jul 31, 09:50 UTC · Jul 31, 2026Malware42
Malware ships with bugs that defenders could use against itHelp Net Security·Jul 1, 03:09 UTC · Jul 1, 2026Malware42
GitHub to Update npm to Thwart Software Supply Chain AttacksInfosecurity Magazine·Jun 12, 13:00 UTC · Jun 12, 2026Vulnerability42
Mini Shai-Hulud Hits Hundreds of npm Packages in AntV EcosystemInfosecurity Magazine·May 20, 15:00 UTC · May 20, 2026Data breach57
Trellix Reveals Unauthorized Access to Source CodeInfosecurity Magazine·May 5, 08:55 UTC · May 5, 2026Ransomware57
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069The Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Ransomware57
Open Source Community Thwarts Massive npm Supply Chain AttackInfosecurity Magazine·Sep 9, 13:30 UTC · Sep 9, 2025Vulnerability42
PRevent: Open-source tool to detect malicious code in pull requestsHelp Net Security·Feb 24, 09:13 UTC · Feb 24, 2025Malware42
Security Affairs newsletter Round 491 by Pierluigi PaganiniSecurity Affairs·Sep 29, 13:08 UTC · Sep 29, 2024RansomwareCVE-2024-2001760
Sublime Security raises $9.8 million to boost email securityHelp Net Security·Feb 23, 00:00 UTC · Feb 23, 2023Ransomware57
BluBracket enhances its code security solution to help enterprises protect software supply chainsHelp Net Security·Jun 6, 00:00 UTC · Jun 6, 2022Vulnerability42