CoreTechDaily

Tag Library

NPM

Stories from across the site that focus on NPM.

Critical npm Supply Chain Attack Infects 1,300+ Packages with Credential-Stealing Worm

Critical npm Supply Chain Attack Infects 1,300+ Packages with Credential-Stealing Worm

A new Shai-Hulud malware variant, ChainDrop, compromises over 1,300 npm packages, stealing developer and cloud credentials. Learn how it works and how to respond.

Aug 5, 2026

North Korean Hackers Target npm Packages: What You Need to Know

North Korean Hackers Target npm Packages: What You Need to Know

A recent attack by North Korean hackers on npm packages has raised concerns about the potential circulation of stolen secrets. Here's how it impacts users and developers.

Apr 1, 2026