Topic
npm
3 stories about npm that passed the news check, newest first.
Security · High impact ·
jsDelivr handed out the hijacked axios 940,000 times
jsDelivr served a hijacked axios package 940,000 times, according to its public stats.
DEV Community: javascript
Security · High impact ·
Malicious bee-js npm Release and Swarm Desktop Releases Deliver SleepyDuck Ethereum C2 Backdoor
@ethersphere/bee-js version 13.3.0 is reported as compromised.
Socket · 2 sources
Security ·
RAG Pipeline Utils v3.8.2: Security Fixes and a Re-ingest Check
RAG Pipeline Utils v3.8.2 is a security release that fixes issues in several components, including vector-store retrievers, HybridRetriever with access control, GuardrailsPipeline, plugins, AuditLogger and DevServer.
DEV Community: javascript · 2 sources