Submissions by rarkins

Yandex Data Leak Triggers Malicious Package Publication

Malicious Code Deletes Directories If You Do Not Have a License

NPM typosquatting attack targeted popular packages with 1.5B weekly downloads

DYdX – exchange with –$1B daily trades – has had its NPM account hacked

Single Author Uploaded 168 Packages to NPM in Dependency Confusion Attack