securityweek.com Jun 13
NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks:
In response to recent software supply chain attacks, NPM version 12 is blocking the ...
securityweek.com/npm-12-will-change-script-execution-behavior-to-prevent-supply-chain-attacks/
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
legal process whereby a person is put to death by the state as a punishment for an actual or supposed crime
Similar to This
Previous
dlvr.it Oct 26
Worm armed 42 GitHub repos by hiding a payload too big to fail: Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570
What are the healthier crisp choices?: We analysed 66 packets of crisps and savoury snacks – from premium brands like Kettle Chips and lentil-based alternatives ...
which.co.uk/news/article/what-are-the-healthier-crisp-choices-agdfD4f9UdRx
Malicious npm packages evade install-script defenses at runtime: An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat ...
bleepingcomputer.com/news/security/malicious-npm-packages-evade-install-script-defenses-at-runtime/
Massive ChainDrop npm supply-chain attack infects hundreds of packages: Self-propagating malware named 'ChainDrop' has compromised more than 1 ...
bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/
Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers: Amazon linked multiple high-profile open-source software supply chain attacks ...
bleepingcomputer.com/news/security/amazon-links-debug-chalk-npm-supply-chain-attacks-to-north-korean-hackers/
Microsoft links Mastra AI supply chain attack to North Korean hackers: Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than ...
bleepingcomputer.com/news/security/microsoft-links-mastra-ai-supply-chain-attack-to-north-korean-hackers/
New IronWorm malware hits 36 packages in npm supply-chain attack: A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with ...
bleepingcomputer.com/news/security/new-ironworm-malware-hits-36-packages-in-npm-supply-chain-attack/
The New Stack May 22
JFrog report recaps a tumultuous year in supply chain security: JFrog's 2026 report reveals npm attacks surged 451%, 495 malicious AI models were found ...
thenewstack.io/jfrog-ai-supply-chain-security/
GitHub links repo breach to TanStack npm supply-chain attack: GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious ...
bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/
dlvr.it May 19
Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise
theregister.com/cyber-crime/2026/05/19/shai-hulud-keeps-burrowing-314-npm-packages-infected-after-another-account-compromise/5242601
dlvr.it May 12
Cache-poisoning caper turns TanStack npm packages toxic: Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code
theregister.com/cyber-crime/2026/05/12/cache-poisoning-caper-turns-tanstack-npm-packages-toxic/5238650
Supply chain attack: Hundreds of NPM and PyPI packages compromised - | Golem.de: The hacker group TeamPCP is once again digging through countless NPM and Python ...
golem.de/news/supply-chain-angriff-hunderte-von-npm-und-pypi-paketen-kompromittiert-2605-208562.html
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages: A large-scale software supply-chain attack involving the "Shai-Hulud" malware ...
bleepingcomputer.com/news/security/shai-hulud-attack-ships-signed-malicious-tanstack-mistral-npm-packages/
New npm supply-chain attack self-spreads to steal auth tokens: A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer ...
bleepingcomputer.com/news/security/new-npm-supply-chain-attack-self-spreads-to-steal-auth-tokens/
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/
5 ways to spot software supply chain attacks and stop worms - before it's too late
zdnet.com/article/5-ways-to-spot-software-supply-chain-attacks-and-stop-worms-before-its-too-late/
New major npm attack: Hundreds of packages infected with self-replicating malware
heise.de/news/Neuer-NPM-Grossangriff-Selbst-vermehrende-Malware-infiziert-Dutzende-Pakete-10651111.html
Next