file holding the malicious payload read more about Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks

released 20 packages in a span of 11 days read more about Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

read Unicode read more about Malicious npm Package Leverages Unicode Steganography Google Calendar as C2 Dropper

question since its initial publication read more about Malicious npm Package Targets Atomic Wallet Exodus Users by Swapping Crypto Addresses

In October 2025, security researchers uncovered an unprecedented phishing campaign that weaponizes the npm ecosystem.

Attackers published 20 malicious npm packages impersonating legitimate Nomic Foundation and Hardhat plugins, where these packages,

period by four sock puppet accounts read more about 36 Malicious npm Packages Exploited Redis PostgreSQL to Deploy Persistent Implants