Researchers at Socket, a cybersecurity firm specializing in protection against supply chain attacks, and crypto security specialist Scam Sniffer both sounded alarms today, warning that the popular ...

On September 8, several popular npm packages were compromised after a successful phishing attack on a maintainer account.

Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel ...

Reports surfaced that the widely used npm package @ctrl/tinycolor had been compromised by Wormable Malware as part of a ...