A popular JavaScript cryptography library is vulnerable in a way which could allow threat actors to break into user accounts.

A vulnerability in the 'node-forge' package, a popular JavaScript cryptography library, could be exploited to bypass ...

Charlie Eriksen, a researcher at Aikido, identified the infected libraries and confirmed each detection manually to minimize ...

One-Click Publishing Eliminates the Gap Between AI Code Generation and Live Deployment San Francisco, CA – November 26, 2025 ...

Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...

Shai Hulud malware has infected hundreds of NPM libraries, including major ENS and crypto packages, triggering a JavaScript ...

China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage ...

A researcher reported that more than 400 NPM libraries, including a cluster of ENS-linked crypto packages, were breached by ...

Cybersecurity researchers have revealed a set of seven npm packages published by a single threat actor. These packages use a ...

The new version follows last month's version 0.0.1, when the project began to issue tagged releases on GitHub. The switch to ...

The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, ...