Popular node-ipc npm package compromised to steal credentials:
Hackers have injected credential-stealing malware into newly published versions of node-ipc ...
bleepingcomputer.com/news/security/popular-node-ipc-npm-package-compromised-to-steal-credentials/
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
software that is intentionally hostile, intrusive, or damaging to a computer or network
Similar to This
Previous
Zen 6 vs. Zen 5 in Geekbench 7: Up to 24 percent more IPC?: An Epyc 9996 with 256 Zen-6c cores, running at 4.1 GHz, comes close to a Zen-5 Epyc running at 5 ...
pcgameshardware.de/CPU-CPU-154106/News/AMD-Zen-6-Geekbench-7-IPC-Epyc-9996-vs-Zen-5-1557711/
Sudan's famine risk worsened by conflict, drought and funding shortages, report says
pbs.org/newshour/world/sudans-famine-risk-worsened-by-conflict-drought-and-funding-shortages-report-says
The New Stack Aug 31
Shai-Hulud: Whoever controls your package registry controls your pipeline: Learn how the Shai-Hulud worm targets package registries and how to protect your ...
thenewstack.io/shai-hulud-pipeline-security/
Massive ChainDrop npm supply-chain attack infects hundreds of packages: Self-propagating malware named 'ChainDrop' has compromised more than 1 ...
bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/
Hackers backdoor Jscrambler npm package with infostealer malware: The Jscrambler client-side web security company disclosed that a threat actor published a ...
bleepingcomputer.com/news/security/hackers-backdoor-jscrambler-npm-package-with-infostealer-malware/
github.com Jun 22
GitHub - trakkr-aisearch/openai-ads-mcp: OpenAI Ads and ChatGPT Ads MCP Server for the Advertiser API
github.com/trakkr-aisearch/openai-ads-mcp
npm supply chain: valid certificates, stolen accounts: Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages — one of ...
venturebeat.com/security/npm-sigstore-provenance-stolen-identity-audit-grid-2026
securityaffairs.com May 19
Shai-Hulud worm copycats emerge after source code leak: Shai-Hulud worm copycats are already attacking NPM developers after its source code leaked ...
securityaffairs.com/192366/malware/shai-hulud-worm-copycats-emerge-after-source-code-leak.html
Bitwarden CLI npm package compromised to steal developer credentials: The Bitwarden CLI was briefly compromised after attackers uploaded a malicious ...
bleepingcomputer.com/news/security/bitwarden-cli-npm-package-compromised-to-steal-developer-credentials/
Hackers compromise Axios npm package to drop cross-platform malware: Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ ...
bleepingcomputer.com/news/security/hackers-compromise-axios-npm-package-to-drop-cross-platform-malware/
Hacker Tries to Spread Malware to Millions by Hitting 'Axios NPM' Software: Axios functions as pre-built software that a developer can easily incorporate into a ...
uk.pcmag.com/security/164160/hacker-tries-to-spread-malware-to-millions-by-hitting-axios-npm-software
Over 300 npm packages compromised by self-replicating worm: A new piece of malware is spreading through the popular tinycolor NPM library and more than 300 other ...
neowin.net/news/over-300-npm-packages-compromised-by-self-replicating-worm/
dlvr.it Aug 27 25
Nx NPM packages poisoned in AI-assisted supply chain attack: : Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon
theregister.com/2025/08/27/nx_npm_supply_chain_attack/
NPM ecosystem at risk from “Manifest Confusion” attacks: The NPM (Node Package Manager) registry suffers from a security lapse called "manifest confusion ...
bleepingcomputer.com/news/security/npm-ecosystem-at-risk-from-manifest-confusion-attacks/
npm packages hide TurkoRAT malware in what looks like a NodeJS EXE: Researchers have discovered multiple npm packages named after NodeJS libraries that even pack ...
bleepingcomputer.com/news/security/npm-packages-hide-turkorat-malware-in-what-looks-like-a-nodejs-exe/
Next