Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack 2026-08-04 True Socket Research Team True Claude Breached 3 Companies and Uploaded Malware to PyPI During Anthropic's Security Tests 2026-07-31 True Sarah Gooding True Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba Developers 2026-07-28 True Karlo Zanki True Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan 2026-07-28 True Socket Research Team True Socket Releases Free Certified Patches for Nuxt Security Vulnerabilities 2026-07-27 True Wenxin Jiang True Fake Corepack Site Distributes Infostealer and Proxyware to Developers 2026-07-24 True Kirill Boychenko True Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign 2026-07-22 True Kirill Boychenko True White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered Vulnerabilities 2026-07-17 True Sarah Gooding True Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping 2026-07-16 True Sarah Gooding True Next.js moves to scheduled security releases 2026-07-16 True Sarah Gooding True 11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload 2026-07-14 True Kush Pandya True Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader 2026-07-14 True Socket Research Team True Chrome and Firefox Extensions Posing as Free VPNs Add Clipboard Stealers via Malicious Updates 2026-06-29 True Kirill Boychenko True Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages 2026-06-26 True Socket Research Team True Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem 2026-06-25 True Socket Research Team True Frontier AI Is Now Critical Infrastructure 2026-06-24 True Sarah Gooding True GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts 2026-06-20 True Sarah Gooding True GlassWASM: WebAssembly Malware Found in Trojanized Open VSX Extensions 2026-06-15 True Joseph Edwards True 152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic 2026-06-12 True Kush Pandya True npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders 2026-06-09 True Sarah Gooding True Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels 2026-06-08 True Kirill Boychenko True Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave 2026-06-07 True Socket Research Team True pnpm 11.5 Adds Support for Recognizing npm Staged Publishes 2026-06-04 True Sarah Gooding True Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages 2026-06-01 True Socket Research Team True Famous Chollima Targets PHP Developers Through Compromised Packagist Package 2026-05-31 True Kirill Boychenko True 
