# npm packages Published articles for npm packages. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting DevFeed: [PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting]() Original publisher: [Read original article]() Author: Maddie Stewart Published: 2026-09-16T13:36:43.658349Z Content type: news Language: en Sources: [Blog]() Topics: [Malware](), [Large Language Model](), [JavaScript](), [npm](), [npm packages](), [Bug Bounty]() Tags: [bug-bounty](), [javascript](), [llm](), [malware](), [npm](), [npm-packages](), [threat-hunting-intel]() ### AI overview CrowdStrike reports that a financially motivated bug bounty hunter developed and distributed PhantomRaven, a JavaScript-based information stealer through npm. The company assesses with high confidence that a large language model was used to write the malware and says the operator likely used it to identify bug bounty opportunities. ### Source excerpt CrowdStrike identified a financially motivated threat actor who works as a bug bounty hunter and who developed and distributed the JavaScript-based information stealer PhantomRaven. ## Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain DevFeed: [Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain]() Original publisher: [Read original article]() Author: Yaron Avital Published: 2026-08-21T23:00:21Z Content type: article Language: en Sources: [Unit 42]() Topics: [sdlc](), [Security](), [Application Security](), [CI/CD](), [GitHub Actions](), [npm](), [Bun](), [Python](), [Claude Code](), [vs-code](), [Claude](), [Ethereum]() Tags: [blockchain](), [c2](), [chaindrop](), [ci-cd](), [claude-code](), [general](), [github-actions](), [insights](), [malware](), [npm-packages](), [persistence](), [python](), [sdlc](), [security](), [software-supply-chain-attack](), [supply-chain](), [vs-code]() ### AI overview Unit 42 describes how software supply-chain attackers are targeting developer tools, CI/CD pipelines, accounts, packages, setup scripts and developer environments before software reaches production. It examines the ChainDrop npm worm, which used malicious preinstall hooks, a Bun runtime, an obfuscated payload, Python-based memory theft, stolen tokens and secrets, self-propagation, persistence in VS Code and Claude Code, and Ethereum-managed command-and-control infrastructure. ### Source excerpt Attackers are targeting CI/CD pipelines and developer tools instead of application code, requiring total SDLC visibility and strict security controls The post Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain appeared first on Unit 42. ## Token Jacking: Cybercriminals Could Be Stealing Your AI Resources DevFeed: [Token Jacking: Cybercriminals Could Be Stealing Your AI Resources]() Original publisher: [Read original article]() Author: Unit 42 Published: 2026-08-06T10:00:49Z Content type: article Language: en Sources: [Unit 42]() Topics: [token jacking](), [ai security](), [API keys](), [Large language models (LLMs)](), [Authentication](), [transfer stations]() Tags: [ai](), [ai-api](), [ai-gateway](), [ai-security](), [api-keys](), [authentication](), [large-language-models-llms](), [malware](), [npm-packages](), [obfuscation](), [security](), [threat-research](), [token-jacking](), [transfer-stations]() ### AI overview The article explains how criminals steal developers' AI API keys and use the resulting tokens to consume costly language-model resources, causing rapid financial losses. It outlines the role of authentication, automated access keys, token-based billing, and weak billing controls, and recommends security hygiene and AI protection measures. ### Source excerpt Discover how attackers hijack AI tokens to fuel gray market transfer stations by stealing developer API keys. The post Token Jacking: Cybercriminals Could Be Stealing Your AI Resources appeared first on Unit 42. ## Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks DevFeed: [Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks]() Original publisher: [Read original article]() Author: Liran Tal; Lion Kontorer Published: 2026-08-04T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [releases]() Tags: [awareness](), [blog](), [ci](), [ci-cd](), [code](), [developer](), [devops](), [embedded](), [enablement](), [ide](), [incident](), [javascript](), [malware](), [manifest](), [node-js](), [npm-packages](), [open-source-security](), [payload](), [persistence](), [releases](), [research](), [scm](), [secrets](), [security](), [security-labs](), [snyk-learn](), [snyk-open-source](), [snyk-security-intel](), [software](), [supply-chain](), [supply-chain-security](), [vulnerability-insights]() ### AI overview Snyk reports an active supply-chain incident in which keyv 6.0.0 and ten related npm releases contained install-time malware. The article describes the malicious preinstall hook, its second-stage payload, affected-release investigation, and remediation guidance. ### Source excerpt keyv 6.0.0 and ten related npm releases shipped install-time malware. See affected versions, hashes, detection steps, and safe remediation order. ## 'ChainDrop' worm compromises hundreds of popular npm packages DevFeed: ['ChainDrop' worm compromises hundreds of popular npm packages]() Original publisher: [Read original article]() Author: Christophe Tafani-Dereeper, Nick Frichette, Sebastian Obregoso, Martin McCloskey Published: 2026-08-04T00:00:00Z Content type: article Language: en Sources: [Datadog Security Labs]() Topics: [backdoor](), [releases]() Tags: [backdoor](), [chaindrop](), [github](), [malware](), [npm-packages]() ### AI overview ChainDrop is an npm worm that spread a backdoor through hundreds of compromised packages. The article analyzes its loader, which downloads or invokes Bun to run a second-stage payload. ### Source excerpt On August 4, 2026, several popular npm packages, including 'keyv', were compromised to deliver malware. ## Before the first prompt: Code execution paths in trusted coding-agent projects DevFeed: [Before the first prompt: Code execution paths in trusted coding-agent projects]() Original publisher: [Read original article]() Author: Nick Frichette Published: 2026-08-03T00:00:00Z Content type: article Language: en Sources: [Datadog Security Labs]() Topics: [AI-assisted coding](), [Claude Code](), [codex](), [Model Context Protocol (MCP)](), [Social engineering](), [Visual Studio Code](), [npm packages]() Tags: [agent](), [attacks](), [claude-code](), [code](), [codex](), [debugging](), [developers](), [mcp](), [npm-packages](), [social-engineering]() ### AI overview This security article examines how trusted coding-agent projects can execute repository-controlled code before a user sends the first prompt. It describes execution paths involving project-scoped MCP configuration in Codex and project-controlled environment settings and Git probes in Claude Code, without requiring a model response or shell-command approval. ### Source excerpt Learn how trusted coding-agent projects can execute repository-controlled code before the first prompt through Codex MCP configuration and Claude Code environment settings. ## How to protect an npm package from supply chain attacks DevFeed: [How to protect an npm package from supply chain attacks]() Original publisher: [Read original article]() Author: Travis Turner (richardturner@evilmartians.com) Published: 2026-07-28T00:00:00Z Content type: tutorial Language: en Sources: [Evil Martians]() Topics: [npm](), [supply-chain-security](), [Security](), [ci](), [GitHub](), [Open Source]() Tags: [2026](), [ci](), [developer-community](), [dx](), [github](), [how-to](), [javascript](), [monorepo](), [npm](), [npm-packages](), [open-source](), [performance-scale](), [security](), [supply-chain](), [supply-chain-security]() ### AI overview This tutorial explains how to protect npm packages from supply chain attacks. It covers Trusted Publishers, publishing restrictions, organization-wide 2FA, GitHub tag controls, pinned CI actions, CI security linting, cooldowns for new versions, and staged-release approval. ### Source excerpt How to protect your npm package from being stolen in a supply chain attack and improve its position in security ratings ## AsyncAPI supply chain compromise: npm packages backdoored via GitHub Actions "pwn request" (July 2026) DevFeed: [AsyncAPI supply chain compromise: npm packages backdoored via GitHub Actions "pwn request" (July 2026)]() Original publisher: [Read original article]() Published: 2026-07-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [GitHub Actions](), [npm packages](), [AsyncAPI Specification](), [Malware](), [GitHub](), [Remote Access Trojan](), [passwords](), [ssh](), [Cloud](), [Cryptocurrency]() Tags: [asyncapi-supply-chain-attack](), [chainguard-asyncapi](), [chainguard-libraries](), [ci](), [cloud](), [cryptocurrency](), [github](), [github-actions](), [github-actions-pwn-request](), [malicious-packages](), [malware](), [miasma](), [npm](), [npm-packages](), [passwords](), [personal-access-token](), [provenance](), [pull-requests](), [remote-access-trojan](), [ssh](), [supply-chain](), [tokens]() ### AI overview The article analyzes a July 14, 2026 supply-chain compromise in which an attacker stole a privileged GitHub personal access token through a misconfigured GitHub Actions workflow and used it to publish five backdoored versions across four AsyncAPI npm packages. The malware activates when a library is loaded by a build or CI job and steals browser passwords, SSH keys, npm and GitHub tokens, cloud credentials, and cryptocurrency wallets while maintaining command-and-control access. It also explains why Chainguard customers were protected and recommends treating affected environments as compromised and rotating credentials. ### Source excerpt A supply chain attack compromised AsyncAPI npm packages via GitHub Actions. See how Chainguard blocked the malicious releases by design. ## The Mastra AI Ecosystem Was Poisoned At The Registry Level DevFeed: [The Mastra AI Ecosystem Was Poisoned At The Registry Level]() Original publisher: [Read original article]() Author: Roshan Piyush Published: 2026-07-14T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [software supply-chain attack](), [npm packages](), [Malware](), [Artificial Intelligence](), [CI/CD](), [TypeScript](), [Cloud]() Tags: [ai](), [ci-cd](), [malicious-packages](), [malware](), [mastra](), [npm](), [npm-packages](), [software-supply-chain](), [software-supply-chain-attack](), [typescript]() ### AI overview The article examines a June 17, 2026 software supply-chain attack targeting the Mastra AI TypeScript ecosystem. It reports that a compromised contributor account was used to publish 144 malicious packages under the official @mastra npm scope, with registry-level changes introducing the easy-day-js transitive dependency. Installations during the compromise window could expose developer workstations, CI/CD runners, and cloud environments to an information stealer. ### Source excerpt Learn how the Mastra AI supply chain attack poisoned npm packages, impacted AI pipelines, and how Harness SCS helps detect, block, and remediate compromised dep | Blog ## Compromised AsyncAPI npm packages: inside a CI supply-chain attack DevFeed: [Compromised AsyncAPI npm packages: inside a CI supply-chain attack]() Original publisher: [Read original article]() Author: Christophe Tafani-Dereeper, Sebastian Obregoso, Eslam Salem Published: 2026-07-14T00:00:00Z Content type: article Language: en Sources: [Datadog Security Labs]() Topics: [npm](), [Malware](), [ci](), [GitHub](), [C2](), [JavaScript](), [Cryptography](), [IPFS](), [P2P](), [cloud-infrastructure](), [Nostr]() Tags: [c2](), [ci](), [cryptography](), [github](), [go](), [infrastructure](), [javascript](), [malware](), [network](), [npm-packages](), [supply-chain]() ### AI overview This security article examines a CI supply-chain attack in which four compromised @asyncapi npm packages distributed credential-stealing malware. It traces the injected GitHub code, its IPFS-hosted second stage, encrypted configuration, credential harvesting, persistence mechanisms, and resilient command-and-control channels. ### Source excerpt On July 14, 2026, four npm packages in the @asyncapi namespace, totaling over 3 million weekly downloads, were compromised to deliver credential-stealing malware. We investigate how the attack unfolded and how to know if you're affected. ## Chainguard Launches Bugcrowd Bug Bounty With Up to $200,000 in Rewards DevFeed: [Chainguard Launches Bugcrowd Bug Bounty With Up to $200,000 in Rewards]() Original publisher: [Read original article]() Published: 2026-07-06T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Bug Bounty](), [Security](), [Vulnerabilities](), [Exploit](), [npm packages]() Tags: [bounty](), [bug-bounty](), [bugcrowd-bug-bounty](), [chainguard-bug-bounty](), [chainguard-security](), [exploit](), [malicious-packages](), [npm-packages](), [security](), [security-contest](), [shai-hulud](), [supply-chain](), [vulnerabilities]() ### AI overview Chainguard is running a Bugcrowd bug bounty from July 6-27, offering up to $200,000 to researchers who find vulnerabilities in its infrastructure and products. ### Source excerpt Chainguard launches a Bugcrowd bounty with up to $200K in rewards, inviting researchers to test its infrastructure against real-world attacks. ## The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware" DevFeed: [The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware"]() Original publisher: [Read original article]() Published: 2026-06-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Malware](), [Code](), [Open Source](), [npm](), [npm packages](), [Security]() Tags: [chainguard](), [chainguard-libraries](), [ecosystems](), [greyware](), [greyware-scanner](), [hardening](), [javascript](), [malware](), [malware-prevention](), [malware-scanner](), [npm](), [npm-packages](), [open-source](), [packages](), [scanner](), [security](), [source](), [supply-chain-attacks]() ### AI overview Chainguard has introduced a source code scanner that detects traditional malware and "greyware," harmful packages that may perform actions such as credential theft, command interception, API key harvesting, or persistent remote access. The scanner currently protects npm packages, scans more than 100,000 packages daily, and has blocked more than 52,000 packages identified as malware or greyware. ### Source excerpt Chainguard's new scanner blocks malware and 'greyware' before it reaches developers, protecting 100,000+ packages daily across open source ecosystems. ## Shai-Hulud Miasma: Inside the Compromise of Red Hat Packages DevFeed: [Shai-Hulud Miasma: Inside the Compromise of Red Hat Packages]() Original publisher: [Read original article]() Author: Roshan Piyush Published: 2026-06-05T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [npm packages](), [Malware](), [Security](), [CI/CD](), [Cloud](), [Encryption](), [Open Source]() Tags: [azure](), [ci-cd](), [encryption](), [gcp](), [malware](), [miasma](), [npm](), [npm-packages](), [security](), [shai-hulud](), [supply-chain]() ### AI overview This article examines the Miasma supply chain attack that compromised official Red Hat npm packages. It describes credential theft, abuse of trusted publishing and CI/CD pipelines, cloud identity enumeration, and per-infection payload encryption, while discussing mitigation. ### Source excerpt An in-depth look at the Miasma supply chain attack that compromised Red Hat npm packages. Learn how the malware spread, stole credentials, abused trusted publishing, and the steps teams can take to mitigate risk. | Blog ## Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages DevFeed: [Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages]() Original publisher: [Read original article]() Author: Brian Clark Published: 2026-06-01T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Malware](), [npm packages](), [redhat](), [incident](), [GitHub](), [OpenID connect (OIDC)](), [API](), [React](), [Cloud]() Tags: [api](), [article](), [awareness](), [ci-cd](), [cloud-security](), [developer](), [devops](), [devsecops](), [enablement](), [github](), [incident](), [interest](), [npm-packages](), [oidc](), [payload](), [react](), [redhat](), [sbom](), [scm](), [scope](), [secrets](), [security](), [snyk-open-source](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [tech](), [vulnerability-insights]() ### AI overview The Miasma supply chain attack compromised at least 32 @redhat-cloud-services npm package releases used by the Red Hat Hybrid Cloud Console. The malicious installation script steals developer and cloud credentials, attempts to spread through packages victims can publish, and may expose secrets on affected workstations and CI runners. ### Source excerpt A supply chain worm dubbed Miasma has been found in dozens of @redhat-cloud-services npm releases. The malicious preinstall hook steals credentials, probes cloud identities, and can republish other packages. ## Mini Shai-Hulud npm Attack: AntV Ecosystem Compromise (May 2026) DevFeed: [Mini Shai-Hulud npm Attack: AntV Ecosystem Compromise (May 2026)]() Original publisher: [Read original article]() Published: 2026-05-19T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [npm packages](), [supply-chain-security](), [Malware](), [Data visualization](), [Aeternum](), [stripe](), [Raycast extension](), [React UI animations]() Tags: [2026](), [antv](), [chainguard-libraries](), [chainguard-npm](), [malware](), [mini-shai-hulud](), [npm](), [npm-malware](), [npm-packages](), [react](), [supply-chain](), [supply-chain-security]() ### AI overview The article reports that a compromised npm maintainer account pushed malicious versions of 314 packages in Alibaba's AntV ecosystem on May 19, 2026. It describes the Mini Shai-Hulud campaign, which uses install hooks and obfuscated Bun scripts to deliver malware and harvest developer credentials. ### Source excerpt The Mini Shai-Hulud npm worm compromised 314 packages in the AntV ecosystem on May 19, 2026 -- including echarts-for-react and timeago.js. ## Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account DevFeed: [Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account]() Original publisher: [Read original article]() Author: Liran Tal Published: 2026-05-18T23:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Data visualization](), [npm packages](), [Malware](), [npm](), [C2](), [Bun](), [JavaScript](), [GitHub]() Tags: [awareness](), [blog](), [c2](), [data-visualization](), [developer](), [devops](), [devrel](), [javascript](), [malware](), [npm-packages](), [payload](), [secrets](), [security](), [snyk-open-source](), [snyk-platform](), [supply-chain](), [supply-chain-security](), [teampcp](), [tokens]() ### AI overview This article analyzes the Mini Shai-Hulud supply-chain attack targeting the AntV data visualization ecosystem through a compromised npm maintainer account. It describes the mass publication of malicious package versions, the embedded Bun payload, credential and secret theft, C2 persistence, and self-propagation using stolen npm tokens. ### Source excerpt A compromised npm maintainer account triggered an automated burst of over 300 malicious package versions across 323 packages in the AntV data visualization ecosystem, part of the ongoing Mini Shai-Hulud supply chain worm campaign. Here's what the malware does, how to detect exposure, and how to respond. ## TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack DevFeed: [TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2026-05-11T05:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident]() Tags: [article](), [attacks](), [cache](), [ci-cd](), [cryptographic](), [developer](), [devops](), [devsecops](), [github](), [github-actions](), [identity](), [incident](), [maintainers](), [memory](), [npm-packages](), [open-source-security](), [sbom](), [scm](), [security](), [snyk-open-source](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [teampcp](), [tech](), [toolchain](), [vulnerability-insights](), [workflow]() ### AI overview TanStack's legitimate release pipeline was hijacked to publish malicious npm packages with valid SLSA provenance. The article describes the Mini Shai-Hulud supply-chain attack, its impact, and remediation guidance to rotate secrets on affected install environments. ### Source excerpt On May 11, 2026, the Mini Shai-Hulud worm compromised 84 npm package artifacts across 42 @tanstack/* packages (as well as @squawk/*, @mistralai/* packages, and others) by chaining a GitHub Actions "Pwn Request," cache poisoning, and OIDC token extraction from runner memory -- producing the first npm supply chain attack with valid SLSA Build Level 3 attestations. Here's what happened, what was stolen, and what you need to do right now. ## "A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages DevFeed: ["A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2026-04-29T00:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [releases]() Tags: [article](), [awareness](), [ci-cd](), [developer](), [devops](), [ecosystem](), [github](), [github-actions](), [incident](), [interest](), [javascript](), [node-js](), [npm-packages](), [open-source-security](), [payload](), [releases](), [sap](), [scm](), [security](), [snyk-open-source](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [tech](), [tool](), [toolchain](), [vulnerability-insights]() ### AI overview A supply-chain attack compromised four npm packages in the SAP development ecosystem. Malicious releases download Bun and execute an obfuscated credential stealer, while SAP published clean post-incident versions and Snyk issued advisories. ### Source excerpt A new npm supply chain attack self-branded "Mini Shai-Hulud" compromised four SAP-ecosystem packages on April 29, 2026. Snyk has live advisories. Here's the technical breakdown, IOCs, and what to do. ## The case for dependency cooldowns in a post-axios world DevFeed: [The case for dependency cooldowns in a post-axios world]() Original publisher: [Read original article]() Author: Kennedy Toomey Published: 2026-04-16T00:00:00Z Content type: article Language: en Sources: [Datadog Security Labs]() Topics: [Application Security](), [npm packages](), [npm](), [JavaScript](), [Malware](), [DevSecOps](), [Vulnerabilities](), [GitHub Actions](), [Python](), [Docker]() Tags: [application-security](), [docker](), [github-actions](), [javascript](), [npm-packages](), [python](), [security](), [supply-chain](), [vulnerabilities]() ### AI overview The article examines how rapidly updating software dependencies can expose organizations to malicious packages and broader software supply chain attacks. It focuses on npm and JavaScript ecosystems while also describing compromises involving GitHub Actions, Python packages, and Docker images. ### Source excerpt Understanding npm and the importance of dependency cooldowns. ## Malicious axios versions published to npm: Chainguard customers protected DevFeed: [Malicious axios versions published to npm: Chainguard customers protected]() Original publisher: [Read original article]() Published: 2026-03-31T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [axios](), [npm](), [Remote Access Trojan](), [Open Source](), [JavaScript](), [payload](), [Single-page application (SPA)](), [Filesystems](), [HTTP](), [Script](), [Linux](), [macOS]() Tags: [axios](), [axios-attack](), [axios-npm-attack](), [axios-supply-chain-attack](), [c2](), [chainguard-actions](), [chainguard-axios](), [chainguard-libraries](), [chainguard-npm-libraries](), [dependency](), [files](), [http](), [javascript](), [linux](), [macos](), [npm](), [npm-packages](), [payload](), [remote-access-trojan](), [script](), [supply-chain-attacks](), [windows]() ### AI overview The article reports that two malicious axios versions were published to npm with a hidden dependency that deployed a cross-platform remote access trojan on macOS, Windows, and Linux. It explains the compromised maintainer account, post-install execution, command-and-control communication, payload delivery, and recommended auditing and remediation steps. Chainguard customers were protected by package-blocking and source-verification controls. ### Source excerpt Malicious axios versions on npm delivered a RAT via a hidden dependency. Chainguard customers were protected by blocking unsafe packages and verifying source. ## Compromised axios npm package delivers cross-platform RAT DevFeed: [Compromised axios npm package delivers cross-platform RAT]() Original publisher: [Read original article]() Author: Christophe Tafani-Dereeper Published: 2026-03-31T00:00:00Z Content type: article Language: en Sources: [Datadog Security Labs]() Topics: [npm packages](), [Remote Access Trojan](), [backdoor](), [account takeover](), [payload](), [npm](), [OpenID connect (OIDC)](), [GitHub Actions](), [Linux](), [Windows]() Tags: [account-takeover](), [backdoor](), [ci-cd](), [github-actions](), [linux](), [npm-packages](), [oidc](), [payload](), [remote-access-trojan](), [supply-chain](), [windows]() ### AI overview The article analyzes a March 31, 2026 supply-chain compromise in which an attacker hijacked an axios npm maintainer account and published two malicious releases. The releases added a typosquatted dependency that installed a cross-platform remote access trojan, though bugs limited the Windows and Linux payloads. The compromise lasted about three hours before npm removed the packages. ### Source excerpt An attacker hijacked an axios maintainer's npm account to publish malicious releases that deliver a cross-platform RAT. ## Automated Package-Publication Incident IndonesianFoods in the NPM Ecosystem Linked to Crypto Reward-Farming Scam DevFeed: [Automated Package-Publication Incident IndonesianFoods in the NPM Ecosystem Linked to Crypto Reward-Farming Scam]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2025-11-13T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [Boilerplate]() Tags: [automation](), [awareness](), [blog](), [code-security](), [container-security](), [cryptocurrency](), [developer](), [ecosystem](), [incident](), [next-js](), [npm-packages](), [open-source-security](), [publication](), [scam](), [security](), [snyk-code](), [snyk-container](), [snyk-iac](), [snyk-open-source](), [supply-chain-security]() ### AI overview The article examines a large-scale surge of similarly structured NPM package publications linked to a dormant automation script associated with a cryptocurrency reward-farming scheme. It reports no verified active exploit and says the packages currently pose minimal risk, while emphasizing dependency hygiene and registry safeguards. ### Source excerpt In November 2025, a large-scale surge of package publications on the NPM registry with similar structures and naming patterns was discovered. Understand the details of the incident. ## Phishing Campaign Leveraging the NPM Ecosystem DevFeed: [Phishing Campaign Leveraging the NPM Ecosystem]() Original publisher: [Read original article]() Author: Liran Tal Published: 2025-10-09T23:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [npm](), [npm packages](), [browser](), [Malware](), [Open Source]() Tags: [awareness](), [blog](), [browser](), [cdn](), [developer](), [devrel](), [malicious-packages](), [malware](), [npm](), [npm-packages](), [phishing](), [security](), [snyk](), [snyk-platform](), [supply-chain](), [supply-chain-security]() ### AI overview A phishing campaign abuses the npm ecosystem and the unpkg CDN to host and deliver JavaScript through crafted HTML business documents. More than 175 disposable packages redirect victims to credential-harvesting sites when opened in a browser, targeting over 135 organizations. ### Source excerpt A new phishing campaign weaponizes NPM and the unpkg CDN. Over 175 throwaway packages are used to host scripts that redirect users to credential-harvesting sites. The attack targets enterprise employees through the browser, not developers at install time. ## Mitigating malware in the npm ecosystem with Chainguard Libraries DevFeed: [Mitigating malware in the npm ecosystem with Chainguard Libraries]() Original publisher: [Read original article]() Published: 2025-10-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [Malware](), [npm packages](), [npm](), [Security](), [GitHub](), [Open Source]() Tags: [chainguard](), [chainguard-ecosystem](), [chainguard-libraries](), [chainguard-libraries-for-javascript](), [javascript](), [malicious-packages](), [malware](), [npm](), [npm-malware](), [npm-package-attack](), [npm-packages](), [open-source](), [security](), [software-supply-chain]() ### AI overview The article presents research on using Chainguard Libraries for JavaScript to mitigate malware in the npm ecosystem. By requiring attributable source code and validating source-to-artifact integrity through a build-from-source pipeline, the study found that approximately 99% of 8,783 known malicious npm packages would have been prevented from publication, while approximately 99.7% were blocked for users relying on Chainguard Libraries as their sole source of npm dependencies. ### Source excerpt In a recent analysis, Chainguard Libraries for JavaScript prevented over 99% of malicious npm packages published to the npm registry. [Next page]()