Malicious NPM packages abuse Adspect redirects to evade security:
Seven packages published on the Node Package Manager (npm) registry use the Adspect cloud-based ...
bleepingcomputer.com/news/security/malicious-npm-packages-abuse-adspect-redirects-to-evade-security/
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
global system of interlinked hypertext documents accessed via the Internet
software that is intentionally hostile, intrusive, or damaging to a computer or network
Similar to This
Previous
dlvr.it Oct 26
Worm armed 42 GitHub repos by hiding a payload too big to fail: Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570
Malicious npm packages evade install-script defenses at runtime: An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat ...
bleepingcomputer.com/news/security/malicious-npm-packages-evade-install-script-defenses-at-runtime/
AsyncAPI npm packages infected with credential-stealing malware: Five malicious versions of AsyncAPI packages were published to the Node Package Manager ...
bleepingcomputer.com/news/security/-asyncapi-npm-packages-infected-with-credential-stealing-malware/
cybersecuritynews.com Jun 01
Multiple Red Hat Cloud Services npm Packages Compromised to Deploy Credential-Stealing Malware
cybersecuritynews.com/red-hat-cloud-services-npm-packages/
The New Stack May 22
JFrog report recaps a tumultuous year in supply chain security: JFrog's 2026 report reveals npm attacks surged 451%, 495 malicious AI models were found ...
thenewstack.io/jfrog-ai-supply-chain-security/
dlvr.it May 12
Cache-poisoning caper turns TanStack npm packages toxic: Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code
theregister.com/cyber-crime/2026/05/12/cache-poisoning-caper-turns-tanstack-npm-packages-toxic/5238650
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages: A large-scale software supply-chain attack involving the "Shai-Hulud" malware ...
bleepingcomputer.com/news/security/shai-hulud-attack-ships-signed-malicious-tanstack-mistral-npm-packages/
The New Stack Apr 12
How TeamPCP turned Aqua Security’s own Trivy scanner into a weapon against millions of developers
thenewstack.io/teampcp-trivy-supply-chain-attack/
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/
New ‘IndonesianFoods’ worm floods npm with 100,000 packages: A self-spreading package published on npm spams the registry by spawning new packages every every ...
bleepingcomputer.com/news/security/new-indonesianfoods-worm-floods-npm-with-100-000-packages/
NPM flooded with malicious packages downloaded more than 86,000 times: Packages downloaded from NPM can fetch dependencies from untrusted sites.
arstechnica.com/security/2025/10/npm-flooded-with-malicious-packages-downloaded-more-than-86000-times/
5 ways to spot software supply chain attacks and stop worms - before it's too late
zdnet.com/article/5-ways-to-spot-software-supply-chain-attacks-and-stop-worms-before-its-too-late/
Hackers left empty-handed after massive NPM supply-chain attack: The largest supply-chain compromise in the history of the NPM ecosystem has impacted roughly 10% ...
bleepingcomputer.com/news/security/hackers-left-empty-handed-after-massive-npm-supply-chain-attack/
New wave of ‘fake interviews’ use 35 npm packages to spread malware: A new wave of North Korea's 'Contagious Interview' campaign is targeting job ...
bleepingcomputer.com/news/security/new-wave-of-fake-interviews-use-35-npm-packages-to-spread-malware/
Next