JavaScript packages with billions of downloads were injected with malicious code in world's largest supply chain hack, geared to steal crypto — a phishing email is all it took to undermine npm packages

tomshardware - JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

#cybersecurity #supplychain #hack

More packages poisoned in npm attack, but would-be crypto thieves left pocket change

5 months / theregister / Jessica Lyons

JavaScript packages with billions of downloads were injected with malicious code in world's largest supply chain hack, geared to steal crypto — a phishing email is all it took to undermine npm packages

5 months / tomshardware

Massive Supply Chain Attack Targets Cryptocurrencies Through NPM

5 months / gizmodo / Lucas Ropek

Back to Top / Tuesday, September 9, 2025, 10:21 am / permalink 14143 / 3 stories in 5 months




Related Stories

Massive npm supply‐chain attack leaves hackers empty-handed / 5 months

Hackers inject malware into npm packages in supply chain attack / 5 months

Hackers Exploit Sitecore Zero-Day to Deploy Malware / 6 months

SonicWall Faces Ransomware Exploits Targeting VPN Devices / 7 months

Microsoft SharePoint Zero-Day Leak Fuels Hacking Campaign / 7 months

Cartel hacker employs high-tech surveillance to target FBI informants / 8 months

Massive data breach exposes 16 billion login credentials online / 8 months

NorthFeed Inc.

Disclaimer: The information provided on this website is intended for general informational purposes only. While we strive for accuracy, we do not guarantee the completeness or reliability of the content. Users are encouraged to verify all details independently. We accept no liability for errors, omissions, or any decisions made based on this information.