Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

A Mount Pleasant resident is being extorted and threatened with "swatting" after hiring and quickly firing an "ethical hacker ...

Charles Guillemet says a phishing led supply-chain breach could have become a systemic disaster for crypto users.

Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.

A cross-platform malware dubbed ModStealer is slipping past antivirus systems, targeting crypto wallets on Windows, macOS, ...

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved ...

A JavaScript supply chain attack has delivered a crypto-clipper via 18 npm packages; Ledger’s CTO has warned ...