Ten typosquatted npm packages (Jul 4, 2025) delivered a 24MB PyInstaller info stealer using 4 obfuscation layers; ~9,900 ...
Supply chain security company Safety has discovered a trojan in NPM that masqueraded as Anthropic’s popular Claude Code AI ...
Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...
An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.
OAKLAND, Calif.--(BUSINESS WIRE)--npm, Inc., which runs the world’s largest software registry and maintains the npm software package management application, today announced the acquisition of ^Lift ...
After last week a popular JavaScript library started showing full-blown ads in the npm command-line interface, npm, Inc., the company that runs the npm tool and website, has taken a stance and plans ...
GitHub, part of Microsoft, announced on Monday that it's agreed to acquire open source JavaScript solutions company npm Inc. Financial terms of the deal weren't described. Nat Friedman, GitHub's CEO, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback