Tag

maintainer-phishing

Safeguard articles tagged "maintainer-phishing" — guides, analysis, and best practices for software supply chain and application security.

1 article

Incident Analysis

chalk and debug npm package compromise incident

A phished maintainer account led to a malicious npm publish of chalk, debug, and 16 related packages, exposing a crypto-clipper to billions of weekly downloads.

Nov 5, 20257 min read