The coordinated campaign has so far published as many as 46,484 packages, according to SourceCodeRED security researcher Paul ...
A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...
The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...
Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate " ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback