Get all your news in one place.

100’s of premium titles.
One app.

Start reading

Get all your news in one place.

100’s of premium titles. One news app.

Start reading

The Latest Breaking News from NPM

GitHub is finally tightening up security around npm following multiple attacks

Github is looking to harden package publication with mandatory 2FA for local publishing, and more.

TechRadar

A terrifying, self-replicating malwaere has infected npm packages with over 2 million downloads per week - here's how to stay safe

Supply chain attacks against npm users continue with a new self-propagating worm.

TechRadar

Compromised files replace npm packages with a combined 2 billion weekly downloads

The "biggest supply chain attack" in the history of npm took place recently, affecting almost two dozen packages.

TechRadar

From analysis to the latest developments in health,
read the most diverse news in one place.

JavaScript packages with billions of downloads were injected with malicious code in world's largest supply chain hack, geared to steal crypto — a phishing email is all it took to undermine npm packages

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

Tom’s Hardware

Ledger CTO Warns Of Ongoing NPM Supply Chain Attack, Advises Users To Halt Onchain Transactions

Ledger Chief Technology Officer Charles Guillemet on Monday urged crypto users to take immediate precautions following what appears to be a large-scale supply chain cyberattack targeting the JavaScript ecosystem.

Benzinga

NPM packages from Nx targeted in latest worrying software supply chain attack

Hackers target popular open source build system and development toolkit, with relative success.

TechRadar

Are they brave or stupid? Malware targeting Russian crypto hackers found

Researchers found malware hiding in npm packages downloaded by Russian crypto developers.

TechRadar

Read news from The Economist, FT, and more,
with one subscription

Npm package with millions of downloads is at risk from malware hijacking

Hackers were deploying malware through a popular npm package for six hours.

TechRadar

North Korean hackers release malware-ridden packages into npm registry

A second wave of tainted packages was spotted on npm, likely part of a larger campaign.

TechRadar

Popular NPM packages with over a million downloads hit by malware

Researchers discovered 17 NPM packages laden with malware.

TechRadar

NPM users warned dozens of malicious packages aim to steal host and network data

A total of 60 packages were recently removed from NPM.

TechRadar

Ripple cryptocurrency software library hit by major security issue, wallets under threat

Malicious commits were uploaded to NPM but quickly removed.

TechRadar

The Ledger hack could have been much worse. But it also could have been easily prevented

Standards that are commonplace in other industries, such as banking, could have easily prevented a major infrastructure compromise.

Fortune

The EU’s Product Liability Directive could kill open source

Should all commercial activities indirectly resulting from open source really be held liable?

TechRadar

Get all your
news in one place.

100’s of premium titles.
One news app.

The Conversation

Why has a UN torture prevention subcommittee suspended its visit to Australia?

This week, a United Nations torture prevention subcommittee delegation suspended its visit to Australia. The delegation arrived on October 16 and was due to end its visit on October 27, but suspended the visit prematurely on Sunday October 23.

The Guardian - AU

More than 1,200 people are detained indefinitely in Australia with no criminal conviction

‘The scariest thing is what we don’t know’, advocate says of those held on grounds of mental impairment

The Conversation

Who is Emmanuel Macron? Cracking the riddle of France’s divisive president

France’s June parliamentary elections dealt a heavy blow to President Emmanuel Macron and his place in France’s political arena. Holding an outright legislative majority in 2017, with 345 of 577 seats, his parliamentary group shrunk to 245 – a drop of 100 seats. That left him 34 short of the…

Benzinga

Second Sight Medical To Merge With AstraZeneca-Backed Nano Precision Medical

Second Sight Medical Products Inc (NASDAQ: EYES) will acquire privately-held Nano Precision Medical Inc

Get all your
news in one place.

100’s of premium titles.
One news app.

People

From analysis to the latest developments in health,
read the most diverse news in one place.

Organisations

the European Parliament

Read news from The Economist, FT, and more,
with one subscription

Topics

Places

Fourteen days free

Download the app

One app. One membership.
100+ trusted global sources.