Shai-Hulud cyberattack targets more than 25,000 npm projects, stealing developers' credentials.

New granular access tokens allow NPM package maintainers to restrict which packages, scopes, and organizations a token has access to. Looking to improve the safety and security of NPM JavaScript ...

Regtech firm SlowMist noted that recently, the NPM ecosystem experienced another large-scale package poisoning incident.

The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, ...

Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...