Investigations into the Nx "s1ngularity" NPM supply chain attack have unveiled a massive fallout, with thousands of account ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

Millions of users of GitHub, the premier online platform for sharing open-source software, rely on stars to establish their ...

ReversingLabs researcher Lucija Valentić discovered malicious packages on the Node Package Manager (npm) open source ...

Google-owned security firm Mandiant has determined the root cause for the expanding breach of AI-powered marketing platform ...

ReversingLabs' research identified the npm packages clortoolv2 and mimelib2, which used Ethereum smart contracts to hide ...

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved ...

Ethereum smart contracts used to hide URL to secondary malware payloads in an attack chain triggered by a malicious GitHub ...

Security researchers found malware packages using the Ethereum blockchain to conceal malicious commands on GitHub repos.

Two npm packages hide downloader commands via Ethereum smart contracts; uploaded July 2025; targeting crypto developers.