Slopsquatting: the scam built on packages AI invents
Coding assistants suggest npm and pip packages that don't exist — and criminals register those names with malware …
Npm 3 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Jscrambler attack: hackers poison NPM packages
Hackers used leaked NPM credentials in a massive supply chain attack. How the Jscrambler case exposes the soft …
Miasma: supply chain worm infects 32 Red Hat npm packages
On 1 June, the Miasma worm compromised 32 Red Hat npm packages and stole AWS, Azure, GCP and Kubernetes credentials …