A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

Shai-Hulud is the third major supply chain attack targeting the NPM ecosystem after the s1ngularity attack and the recent ...

Security firm Trend Micro has discovered an attack on home routers that involves malicious JavaScript, a mobile website, and a mobile device such as a smartphone. This attack has been taking place ...

Chainguard, the trusted foundation for software development and deployment, today announced Chainguard Libraries for JavaScript, a collection of trusted builds of thousands of common JavaScript ...

The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

Charles Guillemet says a phishing-led supply-chain breach could have become a systemic disaster for crypto users.

The breach hit core JavaScript libraries such as chalk and strip-ansi, downloaded billions of times each week, raising alarms over the security of open-source software. Hackers have compromised widely ...

The supply chain npm attack did not steal millions in crypto, despite initial fears. The wallets used in the attack only managed to grab under $500 in meme tokens.

The developers have fixed several vulnerabilities in the current version of the Chrome web browser. Attacks are already occurring.