Research by security firm Checkmarx has uncovered a campaign involving a malicious package called 'indexed-btree' in the Node ...
Malicious npm package indexed-btree hid its loader in runtime code, avoiding install hooks after logging millions of downloads.
A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.
The NPM ecosystem has suffered another supply chain attack in which a malicious package has accumulated millions of downloads ...
An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...
圖／本報資料庫商傳媒｜林昭衡／綜合外電報導全球軟體套件管理平台 npm（Node 套件管理器）和 Python軟體包索引（PyPI）近日遭遇首例鎖定人工智慧代理（AI Agent）記憶體基礎設施的供應鏈蠕蟲攻擊。惡意軟體 sckit 透過感染 AI ...
Next.js ImageResponse flaw can lead to server code execution when attacker-controlled values reach generated SVG.
Learn how NodeJS helps small businesses automate admin, connect apps, and cut hosting costs, plus the limitations and security risks to plan around.
セキュリティ企業Checkmarxの調査により、Node.jsのパッケージマネージャー（npm）において、正規のライブラリになりすまして合計数百万回ものダウンロード数を記録した悪質なパッケージ「indexed-btree」のキャンペーンが判明しました ...
GitHub's npm registry shipped staged publishing in May 2026, the first mandatory 2FA human checkpoint in its 16-year history, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results