Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data The Hacker News
North Korean Hackers Exploiting npm, GitHub, and Vercel to Deliver OtterCookie Malware Cyber Security News
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft The Hacker News