The "biggest supply chain attack" in the history of npm took place recently, affecting almost two dozen packages.

A new piece of malware is spreading through the popular tinycolor NPM library and more than 300 other packages, some of which ...

A developer has been caught adding malicious code to a popular open-source package that wiped files on computers located in Russia and Belarus as part of a protest that has enraged many users and ...