Post

Socket
@socket.dev

🚨 New Investigation: Attackers are hunting the maintainers behind Lodash, Fastify, buffer, Pino, mocha, Express, and #Nodejs core, because compromising one of them means write access to packages downloaded billions of times a week. socket.dev/blog/attacke...

socket.devAttackers Are Hunting High-Impact Node.js Maintainers in a C...Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

14 reposts28 likes