NPM

RSS

Naked Security

clickbait

NPM

rogue packages

scamming

NPM JavaScript packages abused to create scambait links in bulk

Naked Security

Honda

NPM

Podcast

Supply chain

S3 Ep65: Supply chain conniption, NetUSB hole, Honda flashback, FTC muscle [Podcast + Transcript]

SophosLabs Uncut

Threat Research

Danabot

Featured

node.js

NPM

XMRig

Node poisoning: hijacked package delivers coin miner and credential-stealing backdoor

Naked Security

CVE-2021-23406.

Javascript

node

node.js

NPM

Sandbox

vulnerablity

Poisoned proxy PACs! The NPM package with a network-wide security hole…

Naked Security

Backdoor

malicious package

Microsoft

Microsoft Vulnerability Research

Node Package Manager

NPM

UNIX

Malicious npm package taken down after Microsoft warning