#Npm — Kunal Ganglani

Abstract pattern of symbols and glyphs on black background.

NPM Supply Chain Attacks: Why Packages Like Axios Get Hit

NPM supply chain attacks are escalating fast. Here's how typosquatting, dependency confusion, and malicious packages actually work — and 5 defenses every JavaScript developer needs.

Keep exploring

Close to this topic, not on this page.

LiteLLM PyPI Supply Chain Attack: How It Stole Credentials On March 24, 2026, two backdoored LiteLLM releases on PyPI stole API keys, cloud credentials and Kubernetes secrets from AI developers. 7 min read
Chrome Password Stealers: How Master Key Theft Works Info-stealer malware doesn't crack your Chrome passwords — it just asks Windows to hand over the master key. 7 min read
Glassworm: The Invisible Unicode Attack Hiding in Your Code Your code reviewer can't catch what they can't see. 7 min read