🧰 npm ecosystem

The items that name it 14

• Sign Here: Attributing a Source for a More Trustworthy Software Supply Chain
  paper2026-10-20It is written here as npm ecosystem (3.9 million packages indexed).

  3.9 million packages indexed

• DistillGuard: Malicious NPM Package Detection and API Attack Chain Analysis via Static Graph and LLM Distillation
  paper2026-09-24It is written here as NPM (Node Package Manager) ecosystem.

  Node Package Manager

• Happy Birthday, Shai-Hulud
  article2026-09-18

  Broadly affected by repeated worm waves from September 2025 through August 2026, with hundreds of compromised packages per wave

• How to Defend Against NPM Software Supply Chain Attacks | Blog | Endor Labs
  article2026-09-11

  JavaScript package registry targeted by repeated supply chain attacks via compromised maintainer accounts

• Why Cooldown Windows Belong in Every npm Security Strategy | Blog | Endor Labs
  article2026-09-11It is written here as npm (Node Package Manager) ecosystem.

  target of malware campaigns; lacks easy built-in cooldown period functionality

• The OpenSourceMalware Show #16
  talk2026-08-08

  Over 400 packages affected by the Keyv/Cacheable worm; over 1,000 packages published in the WEL1DROPPER campaign in 72 hours; 10 packages found using the NullReceiver technique

• The OpenSourceMalware Show #15
  talk2026-07-31It is written here as npm ecosystem (general).

  Subject of GitHub's new publish-time malware scanning.

• OpenSourceMalware Blog
  article2026-07-18

  Repeatedly targeted by malware/worms (Mini Shai-Hulud, WeaselBiscuit, Miasma, PolinRider, TeamPCP compromises, etc.).

• ChainVeil and ViteVenom are DPRK’s PolinRider Campaign
  writeup2026-07-17

  Targeted by ChainVeil/PolinRider typosquatting campaign

• How Aikido Intel detects malware and vulnerabilities first
  article2026-07-13

  Monitored by Aikido Intel for malware; over 400 infected packages identified during Shai-Hulud second wave.

• GitHub Secret Scanning Public Monitoring for Enterprises: Coverage and Gaps
  article2026-07-12

  Target of Sha1-Hulud: The Second Coming worm, November 2025

• Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files
  article2026-06-18

  57 npm packages compromised across more than 286 malicious versions in a rolling campaign lasting under two hours (June 3, 2026)

• The OpenSourceMalware Show #7
  talk2026-06-03

  Dominant ecosystem by volume of malicious packages per OpenSourceMalware data Jan–mid-May 2026; affected by Miasma worm and Moika campaign

• Hard Truths: You've Built a Security Stack. Have You Built a False Sense of Security? | Tanya Janca
  video2026-05-27