#npm Articles | LavX News | LavX News

Mini Shai‑Hulud Hijacks @antv npm Packages via Compromised Maintainer Account

Vulnerabilities

Mini Shai‑Hulud Hijacks @antv npm Packages via Compromised Maintainer Account

Copycat Shai‑Hulud Worm Infects Another npm Package, Raising GDPR and CCPA Compliance Alarm

Vulnerabilities

Copycat Shai‑Hulud Worm Infects Another npm Package, Raising GDPR and CCPA Compliance Alarm

npm Supply Chain Attack Exposes Millions of Applications: Can Package Managers Do Better?

Vulnerabilities

npm Supply Chain Attack Exposes Millions of Applications: Can Package Managers Do Better?

OpenAI Responds to TanStack npm Supply Chain Compromise – Required Actions and Timeline

Vulnerabilities

OpenAI Responds to TanStack npm Supply Chain Compromise – Required Actions and Timeline

Stealer Backdoor Found in Node-IPC Versions Targeting Developer Secrets

Stealer Backdoor Found in Node-IPC Versions Targeting Developer Secrets

OpenClaw Had a Rough Week — OpenClaw Blog

OpenClaw Had a Rough Week — OpenClaw Blog

Ongoing Supply Chain Attacks Worm into SAP npm Packages

Vulnerabilities

Ongoing Supply Chain Attacks Worm into SAP npm Packages

npmx Alpha Release: Community-Driven Alternative Browser for npm Registry

npmx Alpha Release: Community-Driven Alternative Browser for npm Registry

The Fragile Foundations: How Binary Package Ecosystems Undermine Software Supply Chain Security

npm Supply Chain Worm Compromises Developer Environments, Steals Secrets and Spreads Like Wildfire

Vulnerabilities

npm Supply Chain Worm Compromises Developer Environments, Steals Secrets and Spreads Like Wildfire

Vulnerabilities

Supply Chain Compromise Impacts Axios Node Package Manager

Anthropic Exposes Claude Code Source via npm Source Map File

Vulnerabilities

Anthropic Exposes Claude Code Source via npm Source Map File

Axios npm Package Compromised in Supply Chain Attack

Vulnerabilities

Axios npm Package Compromised in Supply Chain Attack