JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

Billions (No, that's not a typo, Billions with a capital B) of files were potentially compromised. If you thought Node Package Manager (npm), the Billions of downloads were potentially compromised ...

Hackers hijacked popular web code to steal crypto. Users must check every wallet transaction to avoid losing funds.

The Bybit attack exploited predictable behaviors and habitual transaction approvals, proving that cybersecurity isn’t just about technology but also about human vigilance. The attack bypassed Bybit’s ...

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated ...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

An NPM supply chain attack has prompted Ledger Chief Technology Officer Charles Guillemet to urge crypto users to pause on-chain transactions.