Top Tweets for #NpmSecurity
🚨 claude-sesh 1.1.3 is “fixed” on GitHub but still vulnerable in npm, where developers install it. Source fixes protect nobody until they ship—especially when session IDs can escape the folder.
https://t.co/TLFIgWTBR7
#WindowsSecurity #PathTraversal #NpmSecurity #ClaudeSesh
🚨 ChainDrop turns “npm install” into a credential heist, spreading through trusted packages and Windows CI runners. Treat it like an active breach—not another package to quietly uninstall.
https://t.co/FuAh144Zmq
#WindowsSecurity #SupplyChainSecurity #NpmSecurity #Chaindrop
🚨 This isn’t a “run npm update” moment: a hijacked maintainer seeded a credential-stealing worm across 400+ packages. Rebuild exposed hosts, rotate secrets, and audit what actually ran.
https://t.co/k4RRPyxCBH
#NpmSecurity #SupplyChainAttack #CiSecurity #Keyv
1.3 billion downloads infected by ChainDrop malware. Update npm packages now to avoid compromise
#npmsecurity #supplychainattack #malwareprotection
Source: Massive ChainDrop npm supply-chain attack infects hundreds of packages
🚨 npm installs now come with a side of incident response. ChainDrop hit 400+ packages, so affected teams should rotate credentials—because “npm install” shouldn’t mean “deploy a breach.”
https://t.co/ehbHEze7ar
#WindowsDevelopment #SoftwareSupplyChain #NpmSecurity #Chaindrop
🚨 North Korea hijacked 140+ npm AI packages in a supply chain attack. If your team uses Mastra AI or related npm deps. Audit NOW. Credentials & crypto wallets at risk. https://t.co/EkTWJ7adrQ #SupplyChain #cybersecurity #npmSecurity
Analyze the recent Red Hat NPM attack. Learn how hackers bypassed trusted publishing via GitHub Actions to deploy the Mini Shai-Hulud worm.
#RedHat #NPMSecurity #ShaiHulud #SupplyChainAttack #Cybersecurity #InfoSec
https://t.co/jkYqeS0t0a
Learn how a single actor published 14 malicious npm packages. Discover how the malware uses Bun to steal AWS and HashiCorp Vault secrets.
#NPMSecurity #MalwareAnalysis #Cybersecurity #SupplyChainAttack #ThreatIntel #InfoSec
https://t.co/NvS8zDBCH8
DevSecOps Alert: The Shai-Hulud worm hijacked the 'atool' maintainer account to publish 639 malicious npm versions, poisoning the @antv visualization ecosystem.
#ShaiHulud #npmSecurity #SupplyChainAttack #DevSecOps #AppSec #CI/CD #GitHubActions #AntV
https://t.co/WzxmdmTcLb
npm's latest supply chain attack has compromised dev accounts to steal auth tokens, with attackers publishing infected packages to spread the malware, will your business be next to fall victim
#npmsecurity #supplychainrisk #cybersecurity
Hackers compromised the npm account of Axios maintainer, releasing [email protected] and 0.30.4 with malware dropping remote access trojans on Linux, Windows, and macOS. Pin to known safe versions and rotate credentials. #OpenSource #npmSecurity #USA
https://t.co/90fVnrcjVO
The Ghost campaign uses fake npm install logs to phish sudo passwords and deploy a RAT that steals crypto wallets and data. Malicious packages pull keys from Telegram and web3 posts. #GhostCampaign #npmSecurity #Indonesia
https://t.co/KdYOnnDpHF
Critical auth bypass in ClawDBot lets attackers steal gateway tokens with one malicious click, gaining full control and possible code execution, even on localhost. Versions up to v2026.1.28 are affected.
#ClawDBot #AuthBypass #TokenTheft #NPMSecurity #AIGateway #RemoteCodeExec
Security researchers uncovered malicious npm packages distributing NodeCordRAT, a stealthy RAT that steals browser credentials, crypto wallet data, and API tokens.
https://t.co/MA0zhLQVzA
#NodeCordRAT #npmSecurity #SupplyChainAttack #DiscordC2 #CryptoTheft #MalwareAnalysis
A malicious npm package tries to influence AI-driven security scanners while stealing credentials, marking a new tactic in the evolution of supply-chain threats.
https://t.co/dwqQd0QGF1
#CyberSecurity #npmSecurity #AIThreats #SupplyChain #MalwareAnalysis #DevSecOps #Infosec
enable malicious transaction injection, and evaluate the real risk scope for crypto users.
https://t.co/1lGkDUH5G9
#SupplyChainAttack #npmSecurity #DependencyHijack #TransactionInjection #CryptoSecurity #SmartContractRisk #DevSecOps #WalletSafety #OpenSourceSecurity
2.6B npm downloads compromised overnight
Phished maintainer accounts let attackers inject malicious code into 18 core packages like chalk & debug. A stark warning for every dev: MFA & dependency monitoring are no longer optional.
Read more: https://t.co/XC4QxE8Ff6
#npmsecurity
npmの著名メンテナーのアカウントがフィッシングで侵害され、週2億ダウンロード超の20パッケージ（chalk, debug, strip-ansiなど）がマルウェア化。最大級のサプライチェーン攻撃発生。#npmSecurity
https://t.co/UY9BDcIcLO
🚨 The NPM Hack hit 18 of the most used JavaScript packages. Billions of downloads compromised.
Chris breaks it down + how you should react 👇
#NPMSecurity #Web3 #Crypto
Socket discovered 10 malicious npm packages from Toptal's GitHub, exfiltrating GitHub tokens and wiping systems. The compromise vector is under investigation.
#npmSecurity #ToptalHack #SupplyChainAttack #GitHubCompromise #MalwareAlert
https://t.co/zll4TsUHhn
Last Seen Hashtags on Sotwe
Trampling
Seen from Italy
bursagay
Seen from Turkey
ometv flash
Seen from Oman
นักกล้ามชายแดน
Seen from Thailand
เย็ดคนแก่
Seen from Thailand
TEENAGER filter:videos
Seen from Turkey
特別審査員賞
Seen from Indonesia
nolimits()
Seen from United States
ebonyfemdom
Seen from United States
momson() *+filter:native_video
Seen from Singapore
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.2M followers
Barack Obama
@barackobama
119.1M followers
Cristiano Ronaldo
@cristiano
112.9M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.3M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.5M followers
KATY PERRY
@katyperry
89M followers
Taylor Swift
@taylorswift13
82.9M followers
Lady Gaga
@ladygaga
74.4M followers
Virat Kohli
@imvkohli
71.9M followers
Kim Kardashian
@kimkardashian
70.4M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
64.8M followers
Bill Gates
@billgates
64.6M followers
The Ellen Show
@theellenshow
62.4M followers
Selena Gomez
@selenagomez
62.1M followers
CNN
@cnn
61.8M followers
X
@x
60.8M followers