Cyber CrimeNewSupply Chain Breach Hits Jscrambler NPM Package Integrity
Compromised publishing credentials allowed attackers to inject malicious binaries into widely used Jscrambler NPM versions.
> Search
6 results for “npm”
Cyber CrimeNew
SecurityNewStudent Proxy Campaign Turns npm Into a Distributed DDoS Weapon
A swarm of 148 malicious npm packages exploited student browsers to fuel a sophisticated, dual-layered botnet operation.
SecuritySupply Chain Breach Targets Jscrambler Dependency Pipeline
A malicious npm package injection forced a swift cleanup, highlighting the persistent dangers of compromised build environments.
SecurityWhen Build Tools Turn Hostile: Inside the jscrambler Poisoning
A compromised jscrambler package release highlights how modern software pipelines are weaponized to harvest developer secrets.
SecurityWhen Trust is Weaponized: Inside the Injective Labs SDK Compromise
A compromised developer account on GitHub allowed attackers to inject silent credential-stealing malware into a popular Web3 ecosystem.
Securitynpm 12 Reinforces Open-Source Supply Chains Against Covert Exploits
GitHub's npm 12 release hardens software supply chains by disabling install scripts by default and overhauling granular access tokens to mitigate critical risks.