Shai-Hulud is the third major supply chain attack targeting the NPM ecosystem after the s1ngularity attack and the recent ...

It is possible that the attackers behind this attack are the same ones as last time. Their malicious code bears the name of a prominent science fiction monster.

Hardly a week goes by that there isn’t a story to cover about malware getting published to a repository. Last week it was ...

Among the compromised npm packages are those from cybersecurity experts CrowdStrike, as well as others with millions of ...