The Worm in the Machine: Dissecting the Self-Spreading npm Attack
A new npm worm doesn't just steal your keys-it turns your own code into a weapon. A deep dive into the CanisterWorm's anatomy, from postinstall hooks to its unkillable blockchain C2.
Blog
Tag: #npm
The npm Attack Nobody Saw Coming: When Your Database Client Becomes a Spy
After Axios and LiteLLM, attackers are eyeing your database clients. Here's the attack pattern, why DB tools are perfect targets, and how Zero Trust architecture contains the blast radius.
The Axios npm Supply Chain Compromise: A North Korean APT's Bold Move
On March 31, 2026, the North Korean state actor Sapphire Sleet compromised Axios npm packages, injecting malware that deployed RATs on developer machines worldwide. Here's what happened and how to stay safe.