thumbnail XRP supply chain attack: Official NPM package infected with crypto stealing backdoor
thumbnail Fake AWS Packages Ship Command and Control Malware In JPEG Files
thumbnail Diving Deeper into AI Package Hallucinations
thumbnail Google Online Security Blog: The Package Analysis Project: Scalable detection of malicious open source packages
thumbnail Sabotage: Code added to popular NPM package wiped files in Russia and Belarus | Ars Technica