An NPM supply chain attack has prompted Ledger Chief Technology Officer Charles Guillemet to urge crypto users to pause on-chain transactions.

Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

Malware hidden in widely used libraries like chalk and debug hijacked crypto transactions via browser APIs, exposing deep ...

What could have been a historic supply chain attack seems to have been averted due to the rapid response of the open source ...

Miscreants cost victims time rather than money During the two-hour window on Monday in which hijacked npm versions were ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...