Public

More

#javascript #security #supplychain #nodejs

GitLab discovers widespread npm supply chain attack

GitLab discovers widespread npm supply chain attack

Yet another week; yet another supply chain attack...

#blog #data #git #javascript #nodejs #packaging #research #security #supplychain #typescript

·about.gitlab.com·Nov 25, 2025

GitLab discovers widespread npm supply chain attack

ctrl/tinycolor and 40+ NPM Packages Compromised - StepSecurity

ctrl/tinycolor and 40+ NPM Packages Compromised - StepSecurity

A pretty impressive and concerning compromise of a lot of JavaScript (and by extension TypeScript) packages.

#hacking #javascript #nodejs #security #supplychain #typescript

·stepsecurity.io·Sep 16, 2025

ctrl/tinycolor and 40+ NPM Packages Compromised - StepSecurity