Research reports
1,224 reports from 387 publishers45 added in the past week
1 report, newest added first
Added Fri 14 Aug
Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads
Sonatype Research Labs identified six npm packages delivering the same malicious payload: three hijacked legitimate packages and three additional malicious packages, tracked as sonatype-2026-005899 and sonatype-2026-005901. The malware uses the same Ethereum…
Supply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.