Threat Intelligence

Security Threat Feed

Clear insights on active threats, supply chain attacks, and critical vulnerabilities affecting developers and organisations.

Critical
2026-04-21 2026-04-23

Critical npm Supply Chain Attack Targeting Developer Credentials

A worm-like npm attack is stealing developer secrets and spreading through compromised packages.

Read analysis