A malicious package in the Node Package Manager index uses invisible Unicode characters to hide malicious code and Google ...

Malicious npm packages targeting Cursor macOS users stole credentials and disabled updates, impacting 3,200+ downloads.

An npm package named 'rand-user-agent' has been compromised in a supply chain attack to inject obfuscated code that activates ...

Developers adept at multiple coding languages are tricked into installing a familiar-sounding package from within the Node ...

Many versions of the Ripple ledger (XRPL) official NPM package are compromised with malware injected to steal cryptocurrency.… The NPM package, xrpl, is a JavaScript/TypeScript library that devs ...

Supply chain attack compromises the popular rand-user-agent scraping NPM package to deploy and activate a backdoor.

Three NPM packages posing as developer tools for Cursor AI code editor’s macOS version contain a backdoor, researchers warn.

Security researchers have identified three malicious NPM packages masquerading as developer tools for the AI-powered code ...

On March 27, 2025, Vivani announced that it has entered into a securities purchase agreement to issue and sell an aggregate of 7,366,071 shares, each at a price of $1.12 per share, expected to result ...