Software developers, especially those working with cryptocurrencies, are once again facing a supply chain attack via open source code repositories.

Phylum noted that some unknown miscreant was using typosquat packages masquerading as Puppeteer, Bignum.js and various cryptocurrency libraries – 287 packages in total – to trick developers into ...

Well-known open-source node package manager (NPM) registries are the target of massive attacks with malicious packages. These ...

An ongoing attack is uploading hundreds of malicious packages to the open source node package manager (NPM) repository in an ...

Checkmarx researchers have detected a unique supply chain attack within the NPM ecosystem that uses the Ethereum blockchain.

Checkmarx has observed a novel npm supply chain attack using Ethereum smart contracts to manage command-and-control (C2) ...

Unlock workflow potential with custom nodes in n8n. Learn to create tailored solutions for unique business needs.

Mirae Asset Global Investments Co. Ltd. bought a new stake in NuScale Power Co. (NYSE:SMR – Free Report) in the third quarter ...

With the planned sale of the logistics division, Siemens is parting with another niche business. The management’s strategic ...

A popular online animation tool was abused to trick people into handing over access to their cryptocurrency wallets, with at least one individual losing close to $700,000. LottieFiles is a platform ...

LottieFiles has confirmed that Lottie-Player has been compromised in a supply chain attack whose goal is cryptocurrency theft.