Science & TechMay 14, 2026
How One PR Hijacked 169 npm Packages in 6 Minutes
A single pull request compromised 169 npm packages downloaded 50M times weekly. Here's exactly how the Shydhalu attack worked — and how to protect yourself.
Read more→Newsletter
More on "npm security" and beyond
Get our best articles, tools, and insights delivered weekly. Join free and unsubscribe anytime.
Free forever. No spam. Unsubscribe in one click.