Seven malicious PyPi packages were found using Gmail's SMTP servers and WebSockets for data exfiltration and remote command ...

Targeting NPM is an increasingly popular method of launching supply chain attacks for cybercriminals, primarily because of ...

xrpl.js is a popular JavaScript API for interacting with the XRP Ledger blockchain, also called the Ripple Protocol, a ...

ExtraHop, a leader in modern network detection and response (NDR), today launched the industry’s first all-in-one sensor ...

The recommended Ripple cryptocurrency NPM JavaScript library named "xrpl.js" was compromised to steal XRP wallet seeds and ...

A malicious actor used a compromised Ripple dev account to publish commits to NPM The commits would grant access to people's ...

An illicit npm package called 'crypto-encrypt-ts' may appear to revive the unmaintained but vastly popular CryptoJS library, ...

The issue only affects versions of Node Package Manager (NPM), a site where developers share reusable code for projects.

Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram ...

Software security firm Aikodo has alerted XRP Ledger developers to a vulnerability in the XRPL software development kit (SDK) ...