Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack 2026-08-04 92 Socket Research Team True Claude Breached 3 Companies and Uploaded Malware to PyPI During Anthropic's Security Tests 2026-07-31 70 Sarah Gooding True Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba Developers 2026-07-28 85 Karlo Zanki True Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan 2026-07-28 85 Socket Research Team True Socket Releases Free Certified Patches for Nuxt Security Vulnerabilities 2026-07-27 70 Wenxin Jiang True Fake Corepack Site Distributes Infostealer and Proxyware to Developers 2026-07-24 72 Kirill Boychenko True Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign 2026-07-22 85 Kirill Boychenko True White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered Vulnerabilities 2026-07-17 0 Sarah Gooding True Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping 2026-07-16 80 Sarah Gooding True Next.js moves to scheduled security releases 2026-07-16 90 Sarah Gooding True 11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload 2026-07-14 75 Kush Pandya True Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader 2026-07-14 85 Socket Research Team True Chrome and Firefox Extensions Posing as Free VPNs Add Clipboard Stealers via Malicious Updates 2026-06-29 70 Kirill Boychenko True Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages 2026-06-26 80 Socket Research Team True Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem 2026-06-25 88 Socket Research Team True Frontier AI Is Now Critical Infrastructure 2026-06-24 75 Sarah Gooding True GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts 2026-06-20 70 Sarah Gooding True GlassWASM: WebAssembly Malware Found in Trojanized Open VSX Extensions 2026-06-15 78 Joseph Edwards True 152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic 2026-06-12 65 Kush Pandya True npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders 2026-06-09 20 Sarah Gooding True Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels 2026-06-08 85 Kirill Boychenko True Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave 2026-06-07 85 Socket Research Team True pnpm 11.5 Adds Support for Recognizing npm Staged Publishes 2026-06-04 45 Sarah Gooding True Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages 2026-06-01 85 Socket Research Team True Famous Chollima Targets PHP Developers Through Compromised Packagist Package 2026-05-31 85 Kirill Boychenko True 
