NPM Supply Chain Breach – Single Phish Compromises 2.8B Weekly Downloads
What's brutal about this NPM breach: one phishing email on September 8, 2025 cascaded into 20 compromised packages pulling 2.8 billion weekly downloads. The attacker spoofed NPM Support with a perfect…
Category: Threat Alerts / Threat Intelligence / Threat Intelligence