Check Point, Wednesday, September 10th, 2025
The Great NPM Heist - September 2025
The JavaScript ecosystem experienced what is now considered the largest supply chain attack in npm history. A sophisticated phishing campaign led to the compromise of a trusted maintainer's account, resulting in the injection of cryptocurrency-stealing malware into 18+ foundational npm packages.
more →