
Security
n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens
1/12/2026
Frontend
npm's Tradeoffs: How Growth-First Design Fueled JavaScript's Rise and Created Docker Dependency
12/27/2025

Security
Shai-Hulud Attack Exposes npm's Supply Chain Crisis: How to Defend Against Self-Replicating Worms
9/19/2025

AI
Worm-Style 'Shai-Hulud' Attack Infects 187 npm Packages in Self-Propagating Supply Chain Assault
9/16/2025

Security
Massive npm Supply Chain Attack Hijacks 2.6 Billion Weekly Downloads via Phishing Compromise
9/8/2025

Security
Critical Supply Chain Breach: Popular 'debug' npm Package Compromised with Cryptominer Payload
9/8/2025
AI
The Node.js Dependency Nightmare: How Micropackaging and Supply Chain Risks Plague npm
9/3/2025

Dev
npm's Accidental Stylus Takedown Breaks Global Builds: A Supply Chain Security Wake-Up Call
7/23/2025