An npm package named 'rand-user-agent' has been compromised in a supply chain attack to inject obfuscated code that activates ...

Malicious npm packages targeting Cursor macOS users stole credentials and disabled updates, impacting 3,200+ downloads.

Developers adept at multiple coding languages are tricked into installing a familiar-sounding package from within the Node ...

Supply chain attack compromises the popular rand-user-agent scraping NPM package to deploy and activate a backdoor.

Three NPM packages posing as developer tools for Cursor AI code editor’s macOS version contain a backdoor, researchers warn.

Security researchers have identified three malicious NPM packages masquerading as developer tools for the AI-powered code ...

Many versions of the Ripple ledger (XRPL) official NPM package are compromised with malware injected to steal cryptocurrency.… The NPM package, xrpl, is a JavaScript/TypeScript library that devs ...

On March 27, 2025, Vivani announced that it has entered into a securities purchase agreement to issue and sell an aggregate of 7,366,071 shares, each at a price of $1.12 per share, expected to result ...

Seattle-based ExtraHop got its start back in 2007, largely focused on network performance monitoring (NPM). The company has ...