Malware & Ransomware
Detecting Malicious npm Packages in Your Build Pipeline
Malicious npm packages often hide inside development dependencies, bypassing production security controls until the build process executes the hidden code.
supply chain
Everything Vuln Post has reported about supply chain: 2 stories, newest first. Part of our Malware & Ransomware coverage.
Malware & Ransomware
Vulnerabilities
npm Packages Exposed via Trusted Publishing Flaw in SlugFest Report
Bloom Security found over 1,500 npm packages vulnerable to a publishing attack that could allow AI agents to install malicious code without credential theft.