Hackers left empty-handed after massive NPM supply-chain attack:
The largest supply-chain compromise in the history of the NPM ecosystem has impacted roughly 10% ...
bleepingcomputer.com/news/security/hackers-left-empty-handed-after-massive-npm-supply-chain-attack/
Story Details
| Last Updated | |
| Total Articles | 2 |
Main Topics
software that is intentionally hostile, intrusive, or damaging to a computer or network
non-cellular, submicroscopic infectious agent that replicates only inside the living cells of an organism
Similar to This
Previous
Massive ChainDrop npm supply-chain attack infects hundreds of packages: Self-propagating malware named 'ChainDrop' has compromised more than 1 ...
bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/
AsyncAPI npm packages infected with credential-stealing malware: Five malicious versions of AsyncAPI packages were published to the Node Package Manager ...
bleepingcomputer.com/news/security/-asyncapi-npm-packages-infected-with-credential-stealing-malware/
Microsoft links Mastra AI supply chain attack to North Korean hackers: Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than ...
bleepingcomputer.com/news/security/microsoft-links-mastra-ai-supply-chain-attack-to-north-korean-hackers/
New IronWorm malware hits 36 packages in npm supply-chain attack: A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with ...
bleepingcomputer.com/news/security/new-ironworm-malware-hits-36-packages-in-npm-supply-chain-attack/
cybersecuritynews.com Jun 01
Multiple Red Hat Cloud Services npm Packages Compromised to Deploy Credential-Stealing Malware
cybersecuritynews.com/red-hat-cloud-services-npm-packages/
dlvr.it May 27
CrowdStrike, Google shatter Glassworm botnet: Developer-targeted, supply-chain attacks all the rage these days
theregister.com/cyber-crime/2026/05/27/crowdstrike-google-shatter-glassworm-botnet/5247337
dlvr.it May 22
Megalodon chums the waters in 5.5K+ GitHub repo poisonings: Will Jason Statham save us?
theregister.com/security/2026/05/22/megalodon-chums-the-waters-in-55k-github-repo-poisonings/5245342
GitHub links repo breach to TanStack npm supply-chain attack: GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious ...
bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/
dlvr.it May 12
Cache-poisoning caper turns TanStack npm packages toxic: Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code
theregister.com/cyber-crime/2026/05/12/cache-poisoning-caper-turns-tanstack-npm-packages-toxic/5238650
Supply chain attack: Hundreds of NPM and PyPI packages compromised - | Golem.de: The hacker group TeamPCP is once again digging through countless NPM and Python ...
golem.de/news/supply-chain-angriff-hunderte-von-npm-und-pypi-paketen-kompromittiert-2605-208562.html
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages: A large-scale software supply-chain attack involving the "Shai-Hulud" malware ...
bleepingcomputer.com/news/security/shai-hulud-attack-ships-signed-malicious-tanstack-mistral-npm-packages/
Supply chain attack: Several SAP software projects compromised - | Golem.de: Attackers have injected malicious code into SAP's NPM packages to steal access ...
golem.de/news/supply-chain-angriff-mehrere-softwareprojekte-von-sap-kompromittiert-2604-208187.html
Supply chain attack on password manager: Bitwarden’s NPM package compromised - Golem.de
golem.de/news/supply-chain-angriff-auf-passwortmanager-npm-paket-von-bitwarden-kompromittiert-2604-207974.html
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/
5 ways to spot software supply chain attacks and stop worms - before it's too late
zdnet.com/article/5-ways-to-spot-software-supply-chain-attacks-and-stop-worms-before-its-too-late/
New major npm attack: Hundreds of packages infected with self-replicating malware
heise.de/news/Neuer-NPM-Grossangriff-Selbst-vermehrende-Malware-infiziert-Dutzende-Pakete-10651111.html
Supply chain attack: NPM packages with billions of downloads compromised - | Golem.de
golem.de/news/supply-chain-angriff-npm-pakete-mit-milliarden-von-downloads-kompromittiert-2509-199901.html
Next