Malicious npm packages targeting Cursor macOS users stole credentials and disabled updates, impacting 3,200+ downloads.

A malicious package in the Node Package Manager index uses invisible Unicode characters to hide malicious code and Google ...

An npm package named 'rand-user-agent' has been compromised in a supply chain attack to inject obfuscated code that activates ...

Three NPM packages posing as developer tools for Cursor AI code editor’s macOS version contain a backdoor, researchers warn.

Developers adept at multiple coding languages are tricked into installing a familiar-sounding package from within the Node ...

Supply chain attack compromises the popular rand-user-agent scraping NPM package to deploy and activate a backdoor.

Security researchers have identified three malicious NPM packages masquerading as developer tools for the AI-powered code ...

Many versions of the Ripple ledger (XRPL) official NPM package are compromised with malware injected to steal cryptocurrency.… The NPM package, xrpl, is a JavaScript/TypeScript library that devs ...

A threat actor seemingly exploited an XRP Ledger’s developer access token to publish illicit code to the burgeoning network in a move that could have been “catastrophic” for the network, the ...