For the past four months, over 130 malicious NPM packages deploying information stealers have been collectively downloaded ...
Ten typosquatted npm packages (Jul 4, 2025) delivered a 24MB PyInstaller info stealer using 4 obfuscation layers; ~9,900 ...
Yarn is a powerful JavaScript package manager that is compatible with npm and helps automate the process of installing, updating, configuring, and removing npm packages. Yarn provides speed and ...
The ongoing ‘PhantomRaven’ malicious campaign has infected 126 npm packages to date, representing 86,000 downloads ...
Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...
An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.
GitHub security team has identified several high-severity vulnerabilities in npm packages, "tar" and "@npmcli/arborist," used by npm CLI. The tar package receives 20 million weekly downloads on ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback