#npm

NuGet and npm Malicious Packages Steal ASP.NET Data and Drop Malware

Feb 25, 2026 // 17:36

Recent supply chain attacks on NuGet and npm have targeted developers by exfiltrating sensitive application data and deploying cross-platform malware. Malicious NuGet Packages: ASP.NET Data Theft Researchers at Socket identified four […]

Active “SANDWORM_MODE” Campaign Targets Developers’ Secrets via Malicious npm Packages

Feb 23, 2026 // 14:20

A sophisticated supply chain worm campaign codenamed SANDWORM_MODE is actively targeting the npm ecosystem. This campaign uses malicious packages to harvest cryptocurrency keys, CI/CD secrets, and API […]

Previous 1 … 10 11 12