NPM Supply Chain Attack

Heloise Meyer | Sept. 23, 2025, 3:44 p.m.

Further information on the NPM Supply Chain Attack

What We Know About the NPM Supply Chain Attack [Jeffrey Francis Bonaobra, Trend Micro]

"Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack (Updated September 19) [Palo Alto Networks, Palo Alto Networks]

Self-propagating supply chain attack hits 187 npm packages [Ax Sharma, Bleeping Computer]