#npm

2 articles about npm

GitHub Confirms 3,800 Internal Repos Stolen via Poisoned VS Code Extension
AI Security May 20, 2026

GitHub Confirms 3,800 Internal Repos Stolen via Poisoned VS Code Extension

Threat actor group TeamPCP exfiltrated thousands of GitHub internal repositories through a trojanized Nx Console VS Code extension that lived on the marketplace for just 18 minutes.

OpenAI Confirms Supply Chain Attack: Malware Breached Internal Development Environment
AI Security May 14, 2026

OpenAI Confirms Supply Chain Attack: Malware Breached Internal Development Environment

OpenAI confirms hackers linked to the Shai-Hulud malware campaign breached internal systems through a compromised npm package, exposing code-signing certificates.