NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by ...

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

NPM supply chain attack compromised 18 popular JavaScript packages, swapping crypto wallet addresses, but quick detection ...

Charles Guillemet says a phishing-led supply-chain breach could have become a systemic disaster for crypto users.

A cross-platform malware dubbed ModStealer is slipping past antivirus systems, targeting crypto wallets on Windows, macOS, ...

Hackers launched the largest NPM crypto attack in history and compromised 18 JavaScript packages with billions of downloads.

Mosyle security firm has discovered malware bypassing antivirus software on Windows, macOS, and Linux. The research firm ...

Ledger's CTO Charles Guillemet warned of a large-scale supply chain attack, potentially stealing crypto from common software ...

An NPM supply chain attack has prompted Ledger Chief Technology Officer Charles Guillemet to urge crypto users to pause on-chain transactions.

"debug" package attack failed; malicious update detected early, minimal impact. Developers urged to check their installations ...

Security experts are advising crypto users to be very careful as a large-scale supply chain exploit could be used to swipe funds.

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved ...