If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup: - Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…

cyb3rops's tweet image. If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…
cyb3rops's tweet image. If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…
cyb3rops's tweet image. If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…

Imagine getting access to CI tokens across dev orgs - and blowing it because you didn’t pay $9 to webhook.site The attack didn’t fail because we stopped it - it failed because they used a free account and hit the quota #NPM #SupplyChain

cyb3rops's tweet image. Imagine getting access to CI tokens across dev orgs - and blowing it because you didn’t pay $9 to webhook.site

The attack didn’t fail because we stopped it - it failed because they used a free  account and hit the quota

#NPM #SupplyChain…
cyb3rops's tweet image. Imagine getting access to CI tokens across dev orgs - and blowing it because you didn’t pay $9 to webhook.site

The attack didn’t fail because we stopped it - it failed because they used a free  account and hit the quota

#NPM #SupplyChain…

2+ BILLION downloads compromised ⤵️⚠️ Hackers compromised 18 npm packages with malware to steal crypto. Even trusted dependencies can betray you. 🔗 Read the full breakdown: techrepublic.com/article/news-m… #CyberSecurity #npm #DevSecOps

TechRepublic's tweet image. 2+ BILLION downloads compromised ⤵️⚠️

Hackers compromised 18 npm packages with malware to steal crypto. Even trusted dependencies can betray you.

🔗 Read the full breakdown: techrepublic.com/article/news-m…
  
#CyberSecurity #npm #DevSecOps

Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs. The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.

25BnSSB_INDIA's tweet image. Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs.
The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.
25BnSSB_INDIA's tweet image. Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs.
The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.
25BnSSB_INDIA's tweet image. Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs.
The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.
25BnSSB_INDIA's tweet image. Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs.
The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.

Trying to Implement some functionality as a global npm package. Releasing soon! #JS #npm #Reactjs #Nodejs


With the largest #npm supply chain attack in history hitting over 20 packages, the key to robust software supply chain security lies in shifting your approach "lefter than left." Don't let malicious actors compromise your applications. Discover how to intelligently block risky…

jfrog's tweet image. With the largest #npm supply chain attack in history hitting over 20 packages, the key to robust software supply chain security lies in shifting your approach "lefter than left."

Don't let malicious actors compromise your applications. Discover how to intelligently block risky…

This morning, ⁦@OIP_Ireland⁩ Chief Inspector Mark Kelly met with Garda Commissioner Justin Kelly, Deputy Commissioner Operations Dr Shawna Coxon and Acting Deputy Commissioner Security, Strategy and Governance, Paul Cleary. Fruitful discussion of our future #OPCAT/#NPM role

OIP_Ireland's tweet image. This morning, ⁦@OIP_Ireland⁩ Chief Inspector Mark Kelly met with Garda Commissioner Justin Kelly, Deputy Commissioner Operations Dr Shawna Coxon and Acting Deputy Commissioner Security, Strategy and Governance, Paul Cleary.
Fruitful discussion of our future #OPCAT/#NPM role

Saluting the Eternal Bravery of Our Police Martyrs 🇮🇳 In a solemn ceremony at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi, Shri Somit Joshi, Inspector General, along with officers and #jawans of the Sashastra Seema Bal (#SSB), paid heartfelt homage to the brave…

SSB_INDIA's tweet image. Saluting the Eternal Bravery of Our Police Martyrs 🇮🇳

In a solemn ceremony at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi, Shri Somit Joshi, Inspector General, along with officers and #jawans of the Sashastra Seema Bal (#SSB), paid heartfelt homage to the brave…
SSB_INDIA's tweet image. Saluting the Eternal Bravery of Our Police Martyrs 🇮🇳

In a solemn ceremony at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi, Shri Somit Joshi, Inspector General, along with officers and #jawans of the Sashastra Seema Bal (#SSB), paid heartfelt homage to the brave…
SSB_INDIA's tweet image. Saluting the Eternal Bravery of Our Police Martyrs 🇮🇳

In a solemn ceremony at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi, Shri Somit Joshi, Inspector General, along with officers and #jawans of the Sashastra Seema Bal (#SSB), paid heartfelt homage to the brave…
SSB_INDIA's tweet image. Saluting the Eternal Bravery of Our Police Martyrs 🇮🇳

In a solemn ceremony at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi, Shri Somit Joshi, Inspector General, along with officers and #jawans of the Sashastra Seema Bal (#SSB), paid heartfelt homage to the brave…

Is this the first time a software supply chain attack propagated through a worm? #technews #cybersecurity #npm #womenintech


We would like to reassure our users that Sipnplay was not affected by the recent npm attack 🔒 Web3 lives! #Web3Gaming #NPM #gaming


The NPM conducted a Monitoring visit to Hulhumale Prison and Hulhumale Prison Annex (Unit 4) from 28-30th September #NPM #HRCM

npmmaldives's tweet image. The NPM conducted a Monitoring visit to Hulhumale Prison and Hulhumale Prison Annex (Unit 4) from 28-30th September
#NPM #HRCM
npmmaldives's tweet image. The NPM conducted a Monitoring visit to Hulhumale Prison and Hulhumale Prison Annex (Unit 4) from 28-30th September
#NPM #HRCM

Saluting the Valour of Our Heroes 🇮🇳 Shri Malothu Ramulu Naik, #IPS, Inspector General, along with officers and jawans of the #SSB, paid a solemn tribute to the brave Police Martyrs by laying a wreath at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi. The ceremony…

SSB_INDIA's tweet image. Saluting the Valour of Our Heroes 🇮🇳

Shri Malothu Ramulu Naik, #IPS, Inspector General, along with officers and jawans of the #SSB, paid a solemn tribute to the brave Police Martyrs by laying a wreath at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi.

The ceremony…
SSB_INDIA's tweet image. Saluting the Valour of Our Heroes 🇮🇳

Shri Malothu Ramulu Naik, #IPS, Inspector General, along with officers and jawans of the #SSB, paid a solemn tribute to the brave Police Martyrs by laying a wreath at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi.

The ceremony…
SSB_INDIA's tweet image. Saluting the Valour of Our Heroes 🇮🇳

Shri Malothu Ramulu Naik, #IPS, Inspector General, along with officers and jawans of the #SSB, paid a solemn tribute to the brave Police Martyrs by laying a wreath at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi.

The ceremony…
SSB_INDIA's tweet image. Saluting the Valour of Our Heroes 🇮🇳

Shri Malothu Ramulu Naik, #IPS, Inspector General, along with officers and jawans of the #SSB, paid a solemn tribute to the brave Police Martyrs by laying a wreath at the National Police Memorial (#NPM), Chanakyapuri, #NewDelhi.

The ceremony…

Day 144 of #200DaysOfCode Learning #npm Learned about: ✅ Node REPL ✅ npm basics & commands ✅ Dependencies vs DevDependencies ✅ package.json, package-lock.json & node_modules #JavaScript #NodeJS #WebDevelopment #CodingJourney

ArashadAhamad10's tweet image. Day 144 of #200DaysOfCode
Learning #npm 
Learned about:
✅ Node REPL
✅ npm basics & commands
✅ Dependencies vs DevDependencies
✅ package.json, package-lock.json & node_modules

#JavaScript #NodeJS #WebDevelopment #CodingJourney

⚠️ RL researchers have detected the first self-replicating worm (Shai-hulud) compromising popular #npm packages with cloud token-stealing #malware. It has compromised hundreds of packages & organizations, including #CrowdStrike: bit.ly/4grhGAh


Plugin vulnerability exploited! Get the inside scoop on the Postmark MCP attack and what it means for supply chain security.#PostmarkMCP #npm #supplyChainSecurity jpmellojr.blogspot.com/2025/10/the-po…

jpmello's tweet image. Plugin vulnerability exploited! Get the inside scoop on the Postmark MCP attack and what it means for supply chain security.#PostmarkMCP #npm #supplyChainSecurity
jpmellojr.blogspot.com/2025/10/the-po…

Saluting the Eternal Bravery of Our Heroes 🇮🇳 In a moving tribute to the indomitable spirit of our fallen warriors, Dr. Ashok Rai, IG (Medical), accompanied by officers and jawans of the #SSB, laid a wreath at the National Police Memorial (#NPM) in Chanakyapuri, #NewDelhi,…

SSB_INDIA's tweet image. Saluting the Eternal Bravery of Our Heroes 🇮🇳

In a moving tribute to the indomitable spirit of our fallen warriors, Dr. Ashok Rai, IG (Medical), accompanied by officers and jawans of the #SSB, laid a wreath at the National Police Memorial (#NPM) in Chanakyapuri, #NewDelhi,…
SSB_INDIA's tweet image. Saluting the Eternal Bravery of Our Heroes 🇮🇳

In a moving tribute to the indomitable spirit of our fallen warriors, Dr. Ashok Rai, IG (Medical), accompanied by officers and jawans of the #SSB, laid a wreath at the National Police Memorial (#NPM) in Chanakyapuri, #NewDelhi,…
SSB_INDIA's tweet image. Saluting the Eternal Bravery of Our Heroes 🇮🇳

In a moving tribute to the indomitable spirit of our fallen warriors, Dr. Ashok Rai, IG (Medical), accompanied by officers and jawans of the #SSB, laid a wreath at the National Police Memorial (#NPM) in Chanakyapuri, #NewDelhi,…
SSB_INDIA's tweet image. Saluting the Eternal Bravery of Our Heroes 🇮🇳

In a moving tribute to the indomitable spirit of our fallen warriors, Dr. Ashok Rai, IG (Medical), accompanied by officers and jawans of the #SSB, laid a wreath at the National Police Memorial (#NPM) in Chanakyapuri, #NewDelhi,…

📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 28.7M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 9.8M/month openai is dominating with 28.7M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools


📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 28.7M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 9.8M/month openai is dominating with 28.7M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools


📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 28.7M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 9.8M/month openai is dominating with 28.7M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools


📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 28.7M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 9.8M/month openai is dominating with 28.7M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools


🚨 175 malicious npm packages. 26K downloads. One massive blind spot. ☣️ Compromised JavaScript packages are stealing files & planting backdoors. 💡 Quttera’s heuristic engine finds hidden malware before it hits production. #WebSecurity #NPM #DevSecOps #Quttera

MNovofastovsky's tweet image. 🚨 175 malicious npm packages. 26K downloads. One massive blind spot.

☣️ Compromised JavaScript packages are stealing files & planting backdoors.

💡 Quttera’s heuristic engine finds hidden malware before it hits production.

#WebSecurity #NPM #DevSecOps #Quttera

#NPM tienes a miles de detenidos ilegales y andas abogando por detenciones ilegales, eres ridículo


📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 29.3M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 10.0M/month openai is dominating with 29.3M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools

vibe_data's tweet image. 📦 NPM AI Tool Rankings (by monthly downloads):

1. openai: 29.3M/month
2. ai: 13.4M/month
3. @anthropic-ai/sdk: 10.0M/month

openai is dominating with 29.3M monthly downloads.

Real-time data from our continuous monitoring system.

vibe-data.com/dashboard

#NPM #DeveloperTools…

📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 29.3M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 10.0M/month openai is dominating with 29.3M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools

vibe_data's tweet image. 📦 NPM AI Tool Rankings (by monthly downloads):

1. openai: 29.3M/month
2. ai: 13.4M/month
3. @anthropic-ai/sdk: 10.0M/month

openai is dominating with 29.3M monthly downloads.

Real-time data from our continuous monitoring system.

vibe-data.com/dashboard

#NPM #DeveloperTools…

📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 29.3M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 10.0M/month openai is dominating with 29.3M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools

vibe_data's tweet image. 📦 NPM AI Tool Rankings (by monthly downloads):

1. openai: 29.3M/month
2. ai: 13.4M/month
3. @anthropic-ai/sdk: 10.0M/month

openai is dominating with 29.3M monthly downloads.

Real-time data from our continuous monitoring system.

vibe-data.com/dashboard

#NPM #DeveloperTools…

⚠️ Beamglea: 175 npm packages abused npm + unpkg as free hosting for phishing redirects — 26k downloads, 630 lures, 135 orgs hit. #npm #BEC #Phishing #InfoSec #Darkweb #Deepweb More breaking news from the world and the Darkweb here: deepweb.net

godeepweb's tweet image. ⚠️ Beamglea: 175 npm packages abused npm + unpkg as free hosting for phishing redirects — 26k downloads, 630 lures, 135 orgs hit.
#npm #BEC #Phishing #InfoSec #Darkweb #Deepweb

More breaking news from the world and the Darkweb here: deepweb.net

The largest NPM supply chain attack in history has resulted in less than $500 in gains so far. #NPM

WEB2WAXX's tweet image. The largest NPM supply chain attack in history has resulted in less than $500 in gains so far. #NPM

📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 29.3M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 10.0M/month openai is dominating with 29.3M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools


📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 29.3M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 10.0M/month openai is dominating with 29.3M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools


📦 NPM AI Tool Rankings (by monthly downloads): 1. openai: 29.3M/month 2. ai: 13.4M/month 3. @anthropic-ai/sdk: 10.0M/month openai is dominating with 29.3M monthly downloads. Real-time data from our continuous monitoring system. vibe-data.com/dashboard #NPM #DeveloperTools


1k+ downloads in last 9hrs 🎉🎉 Dammmm.... ➡️ npm create x402-magicaly@latest 🔖 Docs x402magic.xyz Thanks devs for supporting it soooo mucchh, I am so proud to be so helpful to the dev community. Please share reviews and PRa on git #x402 #buildinpublic #npm

AbhinavBuilds's tweet image. 1k+ downloads in last 9hrs 🎉🎉
Dammmm....

➡️  npm create x402-magicaly@latest

🔖 Docs x402magic.xyz

Thanks devs for supporting it soooo mucchh, I am so proud to be so helpful to the dev community.

Please share reviews and PRa on git

#x402 #buildinpublic #npm…

#nodejs #npm Shai-Hulud のダルい件 safe-chain setup が windows11 でコケる みたいな記事をみかけた powershell からの setup はたしかにコケたが git bash からはイケた


Scanning npm deps shouldn’t need a security team. Paste your package.json, get a risk report in seconds, fix before npm i. Seatbelt for JS. #npm #DevSecOps

block_hacks's tweet image. Scanning npm deps shouldn’t need a security team. Paste your package.json, get a risk report in seconds, fix before npm i. Seatbelt for JS. 
#npm #DevSecOps

If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup: - Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…

cyb3rops's tweet image. If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…
cyb3rops's tweet image. If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…
cyb3rops's tweet image. If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…


🚨 Detect Compromised NPM Package (debug, chalk, and others) installs in your environment. Link to query: github.com/Cyb3r-Monk/Thr… #npm #ThreatHunting #KQL

Cyb3rMonk's tweet image. 🚨 Detect Compromised NPM Package (debug, chalk, and others) installs in your environment.

Link to query:
github.com/Cyb3r-Monk/Thr…

#npm #ThreatHunting #KQL

羅伯特•雷曼收藏 從印象派到現代主義 #NPM #theMet

andynhctc's tweet image. 羅伯特•雷曼收藏
從印象派到現代主義
#NPM
#theMet
andynhctc's tweet image. 羅伯特•雷曼收藏
從印象派到現代主義
#NPM
#theMet
andynhctc's tweet image. 羅伯特•雷曼收藏
從印象派到現代主義
#NPM
#theMet
andynhctc's tweet image. 羅伯特•雷曼收藏
從印象派到現代主義
#NPM
#theMet

Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs. The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.

25BnSSB_INDIA's tweet image. Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs.
The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.
25BnSSB_INDIA's tweet image. Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs.
The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.
25BnSSB_INDIA's tweet image. Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs.
The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.
25BnSSB_INDIA's tweet image. Shri Malothu Ramulu Naik, IPS, IG (Int) along with officers of FHQ SSB & 25 Bn laid wreath at #NPM, Chanakyapuri #NewDelhi, paying tribute to #PoliceMartyrs.
The solemn Retreat & stirring tunes by #SSB Central Band filled the evening with pride & reverence.

📦 #LiveCodes_can import NPM packages without installation! Just import and use - from React to lodash, all your favorite libraries are instantly available. 📚 Module resolution: livecodes.io/docs/features/… #LiveCodes #npm #packages

livecodes_io's tweet image. 📦 #LiveCodes_can import NPM packages without installation! Just import and use - from React to lodash, all your favorite libraries are instantly available.

📚 Module resolution: livecodes.io/docs/features/…
#LiveCodes #npm #packages

Session wrapped up! Now, gear up for our Crossfit Onchain event! Mark your calendar for April 4th #NPM create onchain 🔵🫱🏽‍🫲🏾

CryptoRhinoo's tweet image. Session wrapped up! Now, gear up for our Crossfit Onchain event! 

Mark your calendar for April 4th

#NPM create onchain 🔵🫱🏽‍🫲🏾
CryptoRhinoo's tweet image. Session wrapped up! Now, gear up for our Crossfit Onchain event! 

Mark your calendar for April 4th

#NPM create onchain 🔵🫱🏽‍🫲🏾

#NPM 生态系统出现极具破坏性的蠕虫病毒,以沙丘中的虚拟生物沙虫命名,能够自动感染其他 NPM 包。沙虫病毒的工作方式是当感染开发者设备后,会自动搜寻各种凭据包括 NPM 凭据,然后自动篡改这名开发者有权限操作的包并加入蠕虫,目前已经有超过 178 个软件包被感染。

landiantech's tweet image. #NPM 生态系统出现极具破坏性的蠕虫病毒,以沙丘中的虚拟生物沙虫命名,能够自动感染其他 NPM 包。沙虫病毒的工作方式是当感染开发者设备后,会自动搜寻各种凭据包括 NPM 凭据,然后自动篡改这名开发者有权限操作的包并加入蠕虫,目前已经有超过 178 个软件包被感染。

Saluting the valour of our heroes! Shri Malothu Ramulu Naik, IPS, IG, along with officers and jawans of the #SSB, paid heartfelt homage to the brave #PoliceMartyrs by laying a wreath at the #NPM, Chanakyapuri, #NewDelhi. The event featured a touching Retreat ceremony,…

SSB_INDIA's tweet image. Saluting the valour of our heroes!

Shri Malothu Ramulu Naik, IPS, IG, along with officers and jawans of the #SSB, paid heartfelt homage to the brave #PoliceMartyrs by laying a wreath at the #NPM, Chanakyapuri, #NewDelhi.

The event featured a touching Retreat ceremony,…
SSB_INDIA's tweet image. Saluting the valour of our heroes!

Shri Malothu Ramulu Naik, IPS, IG, along with officers and jawans of the #SSB, paid heartfelt homage to the brave #PoliceMartyrs by laying a wreath at the #NPM, Chanakyapuri, #NewDelhi.

The event featured a touching Retreat ceremony,…
SSB_INDIA's tweet image. Saluting the valour of our heroes!

Shri Malothu Ramulu Naik, IPS, IG, along with officers and jawans of the #SSB, paid heartfelt homage to the brave #PoliceMartyrs by laying a wreath at the #NPM, Chanakyapuri, #NewDelhi.

The event featured a touching Retreat ceremony,…
SSB_INDIA's tweet image. Saluting the valour of our heroes!

Shri Malothu Ramulu Naik, IPS, IG, along with officers and jawans of the #SSB, paid heartfelt homage to the brave #PoliceMartyrs by laying a wreath at the #NPM, Chanakyapuri, #NewDelhi.

The event featured a touching Retreat ceremony,…

Nginx Proxy Manager 2.12.4 lands with API schema fixes, performance improvements, and a batch of new DNS providers for Certbot plugin support. linuxiac.com/nginx-proxy-ma… #Nginx #NPM #OpenSource #ReverseProxy

linuxiac's tweet image. Nginx Proxy Manager 2.12.4 lands with API schema fixes, performance improvements, and a batch of new DNS providers for Certbot plugin support.
linuxiac.com/nginx-proxy-ma…

#Nginx #NPM #OpenSource #ReverseProxy

If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup: - Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…

cyb3rops's tweet image. If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…
cyb3rops's tweet image. If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…
cyb3rops's tweet image. If you’re looking for ways to reduce the risk from compromised #NPM packages, here’s a solid post from Hacker News. I contains a few practical steps to harden your setup:

- Use pnpm. It’s faster, takes less space, and blocks post-install scripts by default. Most of them are…

Malicious #NPM Campaign #Lazarus C2 Web Panel http://{IP}:1224/keys or /pdown + http://{IP}:1245/login + XAMPP + HTML Title = L-Administrator threatbook.io/ip/107.189.20.…

blackorbird's tweet image. Malicious #NPM Campaign  
#Lazarus C2 Web Panel
http://{IP}:1224/keys or /pdown  + http://{IP}:1245/login  + XAMPP + HTML Title = L-Administrator
threatbook.io/ip/107.189.20.…

BeaverTail & InvisibleFerret Analysis from Slovenia CERT #Lazarus cert.si/tz016/

blackorbird's tweet image. BeaverTail & InvisibleFerret Analysis from Slovenia CERT #Lazarus  cert.si/tz016/


2+ BILLION downloads compromised ⤵️⚠️ Hackers compromised 18 npm packages with malware to steal crypto. Even trusted dependencies can betray you. 🔗 Read the full breakdown: techrepublic.com/article/news-m… #CyberSecurity #npm #DevSecOps

TechRepublic's tweet image. 2+ BILLION downloads compromised ⤵️⚠️

Hackers compromised 18 npm packages with malware to steal crypto. Even trusted dependencies can betray you.

🔗 Read the full breakdown: techrepublic.com/article/news-m…
  
#CyberSecurity #npm #DevSecOps

🚨 #npm Supply Chain Attack ☁️ 🎣 118 pkgs (chalk, debug, ansi-*, etc. / 2.5B+ d/w) poisoned after maintainer phishing . 🪲 Injected malware into web & cloud apps + slipping into CI/CD pipelines. 💾 Malicious code reached ~10% of cloud nvironments 🔒 Lock deps, audit SBOMs,…

Cloud_Breach's tweet image. 🚨 #npm Supply Chain Attack ☁️
🎣 118 pkgs (chalk, debug, ansi-*, etc. / 2.5B+ d/w) poisoned after maintainer phishing . 
🪲 Injected malware into web & cloud apps + slipping into CI/CD pipelines. 
💾 Malicious code reached ~10% of cloud nvironments
🔒 Lock deps, audit SBOMs,…

i needed to quickly get a scaffolded template for the dApp I am working on. All I had to do was run: 'npx redapp-cli'. And I got smart contract, frontend, and walletconnect all done for me. Try it now and thank me later: github.com/Saber1Y/re-dapp #Web3 #npm

Sabercodes123's tweet image. i needed to quickly get a scaffolded template for the dApp I am working on.

All I had to do was run: 'npx redapp-cli'.

And I got smart contract, frontend, and walletconnect all done for me.

Try it now and thank me later: github.com/Saber1Y/re-dapp

#Web3 #npm

The largest #NPM supply chain attack in history just compromised 18 packages with 2 billion weekly downloads. Popular packages like chalk, debug, and ansi-styles were hijacked to steal cryptocurrency directly from wallet transactions. The attack is insidious: malicious code…

Gajumaru_Chain's tweet image. The largest #NPM supply chain attack in history just compromised 18 packages with 2 billion weekly downloads. Popular packages like chalk, debug, and ansi-styles were hijacked to steal cryptocurrency directly from wallet transactions.

The attack is insidious: malicious code…

Recently #malicious #npm packages with a complex and highly obfuscated payload was discovered by @Veracode researchers. Our code analysis system could not detect it due to smart use of Javascript type coercion & destructuring. But we ended up flagging the packages as malicious…

abh1sek's tweet image. Recently #malicious #npm packages with a complex and highly obfuscated payload was discovered by @Veracode researchers. Our code analysis system could not detect it due to smart use of Javascript type coercion & destructuring. But we ended up flagging the packages as malicious…

Another day, another #malicious #npm package typosquatting #java #slf4j package name. Found using: github.com/safedep/vet

abh1sek's tweet image. Another day, another #malicious #npm package typosquatting #java #slf4j package name.

Found using: github.com/safedep/vet

Massive npm Supply-Chain Attack: Shai-Hulud Worm Infects 180+ Packages. Security researchers have uncovered a large-scale npm supply-chain attack, where the Shai-Hulud worm has compromised over 180 packages, posing serious risks to developers worldwide. #techjuice #npm #malware

TechJuicePk's tweet image. Massive npm Supply-Chain Attack: Shai-Hulud Worm Infects 180+ Packages.
Security researchers have uncovered a large-scale npm supply-chain attack, where the Shai-Hulud worm has compromised over 180 packages, posing serious risks to developers worldwide. 

#techjuice #npm #malware

Loading...

Something went wrong.


Something went wrong.


United States Trends