NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated ...

The credential stealer harvested username, password, and 2FA codes before sending them to a remote host. With full access, ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

Crypto intelligence platform Security Alliance released a report on Sep. 8 to reveal that Ethereum and Solana wallets have ...