40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials Cyber News September 16, 2025 Share FacebookXPinterestWhatsApp Over 40 npm packages trojanized to steal GitHub and cloud credentials via bundle.js malware BladeOne Search Latest articles Fleets overlooking drivers in cyber training face growing risks March 27, 2026 TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files March 27, 2026 Fake VS Code alerts on GitHub spread malware to developers March 27, 2026 Iranian hackers publish emails allegedly stolen from Kash Patel March 27, 2026 Previous articleMassive Supply Chain Attack Hijacks ctrl/tinycolor With 2 Million Downloads and Other 40 NPM PackagesNext articleOpen Source CyberSOCEval Sets New Benchmark for AI in Malware Analysis and Threat Intelligence Related articles Fleets overlooking drivers in cyber training face growing risks Cyber News March 27, 2026 TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files Cyber News March 27, 2026 Iranian hackers publish emails allegedly stolen from Kash Patel Cyber News March 27, 2026