The Ossprey blog
Supply chain security
The Ossprey blog
Supply chain security
The Ossprey blog
Supply chain security
/ Filters:
All
Real World Attacks
Product Guides
Product Updates
Company Announcements
Company Announcements
After 12 Years, npm Is Blocking Install Scripts by Default
Tom Franks
26 Jun 2026
Company Announcements
After 12 Years, npm Is Blocking Install Scripts by Default
Tom Franks
26 Jun 2026
Real World Attacks
Miasma Shai Hulud targets leoplatform on NPM
Ossprey Research Team
25 Jun 2026
Real World Attacks
Miasma Shai Hulud targets leoplatform on NPM
Ossprey Research Team
25 Jun 2026
Real World Attacks
DPRK Contagious Interview: NPMJS chalk-ultra and vitest-cli
Ossprey Research Team
23 Jun 2026
Real World Attacks
DPRK Contagious Interview: NPMJS chalk-ultra and vitest-cli
Ossprey Research Team
23 Jun 2026
Real World Attacks
Spectre info-stealer live on NPM
Ossprey Research Team
22 Jun 2026
Real World Attacks
Spectre info-stealer live on NPM
Ossprey Research Team
22 Jun 2026
Real World Attacks
Miasma: Anatomy of an Open-Source Supply-Chain Worm
Valentino Duval
8 Jun 2026
Real World Attacks
Miasma: Anatomy of an Open-Source Supply-Chain Worm
Valentino Duval
8 Jun 2026
Real World Attacks
Moika NPM campaign continues with further compromise
Valentino Duval
2 Jun 2026
Real World Attacks
Moika NPM campaign continues with further compromise
Valentino Duval
2 Jun 2026