#npm

13 Oct 2026

npm Trusted Publishing flaw exposed over 1,500 packages to takeover

Security researchers found a validation error in npm’s trusted publishing system that allowed attackers to hijack software releases.

Read more