Npm

RSS

Threat Research

advisory

NPM

Axios

Axios npm package compromised to deploy malware

Naked Security

clickbait

NPM

rogue packages

scamming

NPM JavaScript packages abused to create scambait links in bulk

Naked Security

Honda

NPM

Podcast

Supply chain

S3 Ep65: Supply chain conniption, NetUSB hole, Honda flashback, FTC muscle [Podcast + Transcript]

SophosLabs Uncut

Threat Research

Danabot

Featured

node.js

NPM

XMRig

Node poisoning: hijacked package delivers coin miner and credential-stealing backdoor

Naked Security

CVE-2021-23406.

Javascript

node

node.js

NPM

Sandbox

vulnerablity

Poisoned proxy PACs! The NPM package with a network-wide security hole…

Naked Security

Backdoor

malicious package

Microsoft

Microsoft Vulnerability Research

Node Package Manager

NPM

UNIX

Malicious npm package taken down after Microsoft warning