| npm Targeted by Malware Campaign Mimicking Familiar Library Names (soc) | | 8 |
| npm, security, dependencies, link-lists |
| Threat Actors Misuse Node.js to Deliver Malware and Other Malicious Payloads (mic) | | 7 |
| nodejs, security |
| Polyfill Supply Chain Attack Embeds Malware in JavaScript CDN Assets (lir/sny) | | 6 |
| security, vulnerabilities |
| Using Legitimate GitHub URLs for Malware (sch) | | 5 |
| security, github |
| GitHub, npm Registry Abused to Host SSH Key-Stealing Malware | | 4 |
| github, npm, security, foss |
| Social Engineering Campaign Targeting Tech Employees Spreading Through npm Malware (soc) | | 3 |
| security, npm |
| File Upload Security and Malware Protection (aus) | | 2 |
| security, file-handling, edge-computing |
| Dissecting npm Malware: Five Packages and Their Evil Install Scripts | | 1 |
| npm, security |
