npm Targeted by Malware Campaign Mimicking Familiar Library Names (soc )May 2, 2025 8 npm , security , dependencies , link-lists Threat Actors Misuse Node.js to Deliver Malware and Other Malicious Payloads (mic )Apr 15, 2025 7 nodejs , security Polyfill Supply Chain Attack Embeds Malware in JavaScript CDN Assets (sny )Jun 26, 2024 6 security , vulnerabilities Using Legitimate GitHub URLs for Malware (sch )Apr 22, 2024 5 security , github GitHub, npm Registry Abused to Host SSH Key-Stealing Malware Jan 24, 2024 4 github , npm , security , foss Social Engineering Campaign Targeting Tech Employees Spreading Through npm Malware (soc )Jul 25, 2023 3 security , npm File Upload Security and Malware Protection (aus )May 23, 2023 2 security , file-handling , edge-computing Dissecting npm Malware: Five Packages and Their Evil Install Scripts Apr 15, 2023 1 npm , security