Malicious npm packages posing as utilities delete project directories

Published on June 7, 2025

Two malicious packages have been discovered in the npm JavaScript package index, which masquerades as useful utilities but, in reality, are destructive data wipers that delete entire application directories. [...]

Continue reading on website
Other news

Microsoft shares script to restore inetpub folder you shouldn’t delete

June 6, 2025
Microsoft has released a PowerShell script to help restore an empty 'inetpub' folder created by the April 2025 Windows security updates if deleted. As Microsoft previously warned, this folder helps mitigate a high-severity Windows Process Activation privilege escalation vulnerability. [...]

Supply chain attack hits Gluestack NPM packages with 960K weekly downloads

June 7, 2025
A significant supply chain attack hit NPM after 15 popular Gluestack packages with over 950,000 weekly downloads were compromised to include malicious code that acts as a remote access trojan (RAT). [...]