Security researchers worldwide are warning about a supply-chain attack on the Node Package Manager (NPM), where a ...

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...