În afara temei aiqbench
Această știre a fost preluată de la o sursă pe care o urmărim, dar nu ține de domeniul AI sau cuantic, așa că nu există o perspectivă aiqbench pentru ea.
Popular npm Package With 150K Weekly Downloads Compromised in Mini Shai-Hulud Supply-Chain Attack
A JavaScript development package has been caught in a supply-chain compromise that can run malicious code when installed. The incident affects a tool with about 150,000 weekly downloads, risking developer and automated build systems. Attackers published ten tainted releases on August 28 in two bursts. They covered every maintained version line, and a routine dependency […] The post Popular npm Package With 150K Weekly Downloads Compromised in Mini Shai-Hulud Supply-Chain Attack appeared first on Cyber Security News.
A JavaScript development package has been caught in a supply-chain compromise that can run malicious code when installed. The incident affects a tool with about 150,000 weekly downloads, risking developer and automated build systems. Attackers published ten tainted releases on August 28 in two bursts. They covered every maintained version line, and a routine dependency update could become an entry point for credential theft. The malicious code runs during installation through build configuration…
Extras afișat conform termenilor RSS ai publicației · 73 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
Popular npm Package With 150K+ Weekly Downloads Hit by Credential-Stealing Supply-Chain Worm
Cybersecurity News · 31 aug. 2026
New Shai-Hulud Supply Chain Attack Compromised 400+ Popular npm Packages
Cybersecurity News · 6 aug. 2026
The best small tablets of 2026: Expert tested and reviewed
ZDNet · 21 aug. 2026
Keyv npm Package with 127M Weekly Downloads Compromised in Shai-Hulud Attack
Cybersecurity News · 4 aug. 2026