#npm
Posts tagged npm. 3 articles.
supply chain attack|4 min read
MALFEX’s `imgdecode` Package Shows Why Native npm Addons Need Supply-Chain Scrutiny
Read More
supply chain attack|8 min read
Mastra npm compromise turns AI agent builds into credential-theft risk
Read More
supply chain attack|6 min read
Red Hat npm compromise proves provenance alone is not enough
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- XCPE Backdoor Turns Android TV Boxes into a Supply-Chain Botnet
- NCSC Warns AI-Cyber Will Scale Attacks on UK Critical Infrastructure by 2028
- Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active
- GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue
- NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface