Get the latest tech news

NPM flooded with malicious packages downloaded more than 86k times


Packages downloaded from NPM can fetch dependancies from untrusted sites.

None

Get the Android app

Or read this on ArsTechnica

Read more on:

Photo of Times

Times

Photo of npm

npm

Photo of malicious packages

malicious packages

Related news:

News photo

A deepfake Jensen Huang outperformed Nvidia's real GTC keynote on YouTube – with five times the viewers

News photo

I built the same app 10 times: Evaluating frameworks for mobile performance

News photo

Color-changing organogel stretches 46 times its size and self-heals