Another Shai-Hulud variant hits npm packages, worming its way into hundreds of packages.

NPM, the popular JavaScript package manager, is being upgraded for better performance. Expected to be released tomorrow, NPM Version 5.0 is two to six times faster than NPM 4, said Kat Marchan, a ...

ChainDrop hijacked 444 npm packages and 2B monthly downloads via a Claude Code hook. AI agents have collapsed the gap between ...

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Password manager company Bitwarden confirms NPM package compromise. The advice has been ...

Trojanized npm packages launch RedC2 4.0 on Linux at import time, giving operators shell access, credential theft, and ...