NPM supply chain attack compromised 18 popular JavaScript packages, swapping crypto wallet addresses, but quick detection ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

Binance reassures customers after a massive NPM supply chain attack injects malicious code into 18 popular JavaScript ...

In a supply chain attack, attackers have injected malware into NPM packages with over 2.6 billion weekly downloads after ...

A JavaScript supply chain attack has delivered a crypto-clipper via 18 npm packages; Ledger’s CTO has warned ...

Npm packages are reusable blocks of JavaScript code published to the Node Package Manager registry that developers can ...

On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

A successful phishing attack against a developer has resulted in one of the largest supply chain compromises to date, adding ...

Ledger CTO warns of supply chain cyberattack on JavaScript packages used by over a billion users. Hardware wallets remain ...

Warning from Charles Guillemet, CTO of Ledger, urged certain users to halt onchain transactions due to a potentially ...

Hackers are sharing malicious SVG files which spoof real-life websites in order to trick victims into downloading damaging ...

According to Guillemet, the malicious code — already pushed into packages with over 1 billion downloads — is designed to silently swap crypto wallet addresses in transactions. That means unsuspecting ...