Tag
#npm
testmetest: npm Worm Arms 42 GitHub Repos with a Hidden Publisher
An npm worm stole credentials, planted AI-tool hooks in 42 real GitHub repositories and hid a package publisher; treat installs as compromises.
Oct 30, 2026
Tag
An npm worm stole credentials, planted AI-tool hooks in 42 real GitHub repositories and hid a package publisher; treat installs as compromises.
Oct 30, 2026