JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

Earlier this week, the Npm package manager suffered what may be its worst security incident to date. Unknown cybercriminals ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

A new cyberattack is silently targeting crypto from users during transactions amid an incident that security researchers ...

Blockstream issued an urgent security alert warning users about a sophisticated phishing campaign targeting Jade hardware ...

Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.

The newly surfaced Salty2FA phishing kit shows attackers can sidestep multi-factor authentication by cloaking attacks in ...

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved ...

Binance reassures customers after a massive NPM supply chain attack injects malicious code into 18 popular JavaScript ...

Hackers launched the largest NPM crypto attack in history and compromised 18 JavaScript packages with billions of downloads.

Amazon disrupted APT29’s June 2025 campaign exploiting Microsoft device code authentication, redirecting 10% of visitors to ...

The latest example of the runaway hype that can come from such pitches is research published today by SquareX, a startup ...