Back to article
microsoft.com

Malicious npm packages abuse dependency confusion to profile developer environments (opens in new tab)

Covered by 8 sources See all sources covering this story including This Week In 4n6, DEV Community

Covered in 8 articles

This Week In 4n6·

Week 22

Feeds
DEV Community·

Docker Security Dispatch — Issue 3: Zurich, Worms, and the AI Frontier 🏔️

Discussed on DEV
Feeds
Malware Analysis, News and Indicators·

Malicious npm packages abuse dependency confusion to profile developer environments

Feeds
datanexusmcp.com·

September 2025 NPM Attack Hit 2.6B Weekly Downloads. Most Found Out on Twitter

Discussed on Hacker News
Feeds
CTO at NCSC·

CTO at NCSC Summary: week ending June 7th

Discussed on Substack
Feeds
risky.biz·

Risky Bulletin: Russia greatly expands SORM surveillance requirements

Discussed on Hacker News
Feeds
news.risky.biz·

Risky Bulletin: Russia greatly expands SORM surveillance requirements

Feeds

In other languages

kite.kagi.com·

클라우드 및 뱅킹 자격 증명을 노리는 악성 개발자 패키지

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help