First screen, captured .
Looks similar
Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised(socket.dev)
1182 points by jamesberthoty | 965 comments
StepSecurity blog post reporting that @ctrl/tinycolor and 40+ npm packages were compromised by self-propagating malware that steals cloud credentials.
Related stories
NPM flooded with malicious packages downloaded more than 86k times(arstechnica.com)
349 points by jnord | 248 comments
Ars Technica article on the PhantomRaven campaign, in which malicious NPM packages that fetch dependencies from untrusted sites were downloaded over 86,000 times.
NPM debug and chalk packages compromised(aikido.dev)
1287 points by universesquid | 699 comments
Aikido Security blog post reporting that the popular npm packages debug and chalk were compromised with malicious code in a supply-chain attack.
Malicious versions of Nx and some supporting plugins were published(github.com)
427 points by longcat | 421 comments
GitHub security advisory from the nrwl/nx repository reporting that malicious versions of Nx and several supporting npm plugins were published.
DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware(github.com)
367 points by tosh | 263 comments
GitHub security advisory reporting that DuckDB npm packages (duckdb 1.3.3, node-api, node-bindings, duckdb-wasm 1.29.2) were published with malware, listing patched versions.
GitHub confirms breach of 3,800 repos via malicious VSCode extension(bleepingcomputer.com)
985 points by Timofeibu | 430 comments
BleepingComputer news article reporting that GitHub confirmed a breach of about 3,800 internal repositories via a malicious VSCode extension.
Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised(socket.dev)
1182 points by jamesberthoty | 965 comments
StepSecurity blog post reporting that @ctrl/tinycolor and 40+ npm packages were compromised by self-propagating malware that steals cloud credentials.