Back to article
Unit 42

The npm Threat Landscape: Attack Surface and Mitigations (opens in new tab)

Covered by 8 sources See all sources covering this story including Andrew Nesbitt, DEV Community

Covered in 8 articles

Andrew Nesbitt·

Signing Is for the Bad Days

Discussed on Hacker News and Hacker News
Feeds
DEV Community·

Supply Chain Attacks + Stale Credentials: Why This Combination Is So Dangerous in 2026

Discussed on DEV
Feeds
Digital Forensics Magazine·

NEWS ROUNDUP – 3rd June 2026

Feeds
Tenable Blog·

What the Miasma campaign reveals about the new supply chain threat model and the underground market for developer credentials

Feeds
therecord.media·

Red Hat removes tainted packages after software pipeline compromise

Discussed on Hacker News
Feeds
datanexusmcp.com·

September 2025 NPM Attack Hit 2.6B Weekly Downloads. Most Found Out on Twitter

Discussed on Hacker News
Feeds
snyk.io·

TanStack npm Packages Hit by Mini Shai-Hulud

Feeds

In other languages

kite.kagi.com·

레드햇, 침해된 npm 패키지 32개 제거

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help