Category: Node.js

  • Top Node.js Maintainers Targeted in Sophisticated Social Engineering Scheme

    Top Node.js Maintainers Targeted in Sophisticated Social Engineering Scheme A highly coordinated social engineering campaign is actively targeting top open-source developers in the Node.js and npm ecosystem. Following the recent compromise of the popular package Axios, which sees over 100 million weekly downloads, several high-impact software maintainers have reported similar attacks. Security researchers believe this…