JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

A cryptocurrency thief got into the npm account of a hard-working developer via spearphishing. node.js packages with billions of downloads are affected.

SwissBorg hack drains $41.5 million in Solana via staking protocol exploit, sparking refunds, investigations, and concerns over security.

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

Hackers poisoned JavaScript packages with crypto-stealing malware. The large scale attack exposes a DeFi weak point. The ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

The Web site of one of the U.K.’s most famous landmarks, the Forth Road Bridge, has been torn open in embarrassing fashion to serve malware, researchers are reporting. According to the security blog ...