Charlie Eriksen, a researcher at Aikido, identified the infected libraries and confirmed each detection manually to minimize ...

A popular JavaScript cryptography library is vulnerable in a way which could allow threat actors to break into user accounts.

"As a new and significantly more aggressive wave of npm supply chain malware, Shai-Hulud 2 combines stealthy execution, ...

A major JavaScript supply-chain attack has compromised hundreds of software packages — including at least 10 used widely ...

Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially ...

This framework demonstrates that sophisticated web development doesn't require complex tooling. Built entirely with vanilla JavaScript and zero external dependencies ...