Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
Search across headline titles and summaries.
Weekly headline count for the current query.
NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts
Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator
A malicious campaign using Ethereum smart contracts has been observed targeting developers via npm and GitHub
ReversingLabs noted a 1300% surge in harmful open-source packages between 2020 and 2023
Social engineering campaign designed to deliver malicious npm packages
GitHub says npm is among the organizations affected