• Platform
    Mend-io-logo-mark
    Mend AI Native AppSec Platform Take a tour
    Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - ai
    Mend AI Secure AI powered applications
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    Mend container small icon
    Mend Container Container security done right
    Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - sca
    Mend SCA Decrease open source risk
    Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - dast icon 1 DAST Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - apis icon 1 API security Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - eol icon EOL support
    Platform Benefits
    Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - repoi icon Repo integration Scalability-icon Scalability Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    Featured
    Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - red teaming guide featured image
    AI Red Teaming Practical Guide
    Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - featured image
    A CISO’s Guide to Securing AI from the Start
    Npm ecosystem under siege: self-propagating malware compromises 187 packages in a huge supply chain attack - practical guide to sast white paper image
    A Practical Guide to Making the Most of your SAST Investment
Schedule a Demo

Mend.io Malicious Packages

NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - Blog cover Mend Main Blues 1

NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack

Tom Abai Sep 16, 2025
Malicious Packages

A major NPM breach exposed 187 packages.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - npm supply chain attack blog

NPM Supply Chain Attack: Sophisticated Multi-Chain Cryptocurrency Drainer Infiltrates Popular Packages

Tom Abai Sep 8, 2025
Malicious Packages

A sophisticated npm supply chain attack compromised popular packages

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - truffelvscode blog post

Fake VS Code Extension on npm Spreads Multi-Stage Malware

Tom Abai Feb 6, 2025
Malicious Packages

Learn about a fake VS-code extension on npm—truffelvscode—typosquatting the popular truffle for VS-code extension.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - CVE Critical race condition in Apache Tomcat blog

CVE-2024-50379: A Critical Race Condition in Apache Tomcat

Tom Abai Dec 19, 2024
Malicious Packages

An Apache Tomcat web server vulnerability has been published, exposing the platform to remote code execution through a race condition failure.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - Solana Supply Chain Security Blog graphic

The @Solana/web3.js Incident: Another Wake-Up Call for Supply Chain Security

Tom Abai Dec 5, 2024
Malicious Packages

This post covers the attack flow, how it happened, and the importance of supply chain security.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - polyfill supply chain attack post

More than 100K sites impacted by Polyfill supply chain attack

Tom Abai Jul 1, 2024
Malicious Packages

The new Chinese owner tampers with the code of cdn.polyfill.io to inject malware targeting mobile devices.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - blog 2 1

Over 100 Malicious Packages Target Popular ML PyPi Libraries

Tom Abai Mar 28, 2024
Malicious Packages

Discover the latest security threat as over 100 malicious packages target popular ML PyPi libraries. Learn about the attack methods.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - what new security threats arise from the boom in ai and llms

What New Security Threats Arise from The Boom in AI and LLMs?

Maciej Mensfeld Nov 15, 2023
AI Models Risk

Explore the security threats arising from the boom in AI and LLMs, including data privacy, misinformation, and resource exhaustion.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - what role should dependency management play as the regulation of the software supply chain escalates

What Role Should Dependency Management Play as the Regulation of the Software Supply Chain Escalates?

Adam Murray Sep 26, 2023
Dependency Updates

Discover the importance of dependency management in securing the software supply chain as regulations escalate.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - eight considerations for thwarting malicious packages

8 Considerations for Thwarting Malicious Packages

Rhys Arkins Aug 29, 2023
Malicious Packages

Learn how to protect your code from malicious packages with these eight considerations. Stay ahead of supply chain security threats.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - what you can do to stop software supply chain attacks post

What You Can Do to Stop Software Supply Chain Attacks

Jeff Martin Aug 24, 2023
Software Supply Chain

Learn how to stop software supply chain attacks with SBOMs, best practices, and prioritizing known vulnerabilities. Protect your software.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - theres a new stealer variant in town and its using electron to stay fully undetected

There’s a New Stealer Variant in Town, and It’s Using Electron to Stay Fully Undetected

Tom Abai Aug 10, 2023
Malicious Packages

Discover the latest threat in town - a new info-stealer variant using Electron to remain undetected. Learn about its attack flow.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - brandjacking

What Risks Do You Run from Brandjacking, and How Do You Overcome Them?

Adam Murray Aug 1, 2023
Malicious Packages

Learn about the risks of brandjacking & how to overcome them with application security tools & practices. Protect your org from cyber threats.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - cybersecurity risks posed by typosquatting and how you can beat them

What Cybersecurity Risks Does Typosquatting Pose, and How Can You Beat Them?

Adam Murray Jul 27, 2023
Application Security

Find out what typosquatting is, why it is such a threat, and what you can do to stop it.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - how does slsa help strengthen software supply chain security

How Does SLSA Help Strengthen Software Supply Chain Security?

Adam Murray Jul 7, 2023
Software Supply Chain

Learn how SLSA enhances software supply chain security with levels of protection. Understand the risks, benefits, and best practices.

Read More
NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack - understanding the anatomy of a malicious package attack

Understanding the Anatomy of a Malicious Package Attack

Jeff Martin Jun 13, 2023
Malicious Packages

Learn to protect your applications from malicious packages with our guide. Understand the anatomy of attacks and how to prevent them.

Read More
Previous
1 2
Next

© 2025 Mend.io (White Source Ltd.) All rights reserved.