
Vulnerabilities
Typosquatted npm Packages Expose Multi-Cloud Environments to Credential Theft
5/29/2026
Vulnerabilities
Supply Chain Compromises Impact Nx Console and GitHub Repositories – CISA Alert
5/28/2026

Vulnerabilities
npm Supply‑Chain Slip‑Up Exposes GitHub Tokens and Triggers Data‑Protection Alerts
5/27/2026

Vulnerabilities
Malicious npm Package Exfiltrated Claude AI Files via GitHub – What Developers Need to Know
5/27/2026

Security
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware Across npm, PyPI, and CratesIO
5/25/2026

Security
npm Introduces 2FA-Gated Publishing and Package Controls to Combat Supply Chain Attacks
5/24/2026

Security
npm's Staged Publishing and Install Controls: A New Era for Package Security
5/23/2026

Dev
Deno 2.8 – A deep look at the biggest minor release yet
5/22/2026

Security
npm introduces staged publishing to curb supply‑chain attacks
5/21/2026

Security
npm's Staged Publishing: A New Layer of Security for Package Distribution
5/21/2026

Security
Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
5/20/2026

Security
Shai‑Hulud resurfaces: 314 npm packages compromised after fresh account breach
5/19/2026

Security
TanStack Dissects Sophisticated npm Supply‑Chain Attack That Compromised 42 Packages
5/19/2026