Fake Express Packages on npm Spread a Linux Worm
Nine fake Express and React packages on npm run a Linux worm at install time. It installs a Tor backdoor and spreads through SSH, AUR packages, and npm tokens.
Lobsters18 min read
4 stories
Nine fake Express and React packages on npm run a Linux worm at install time. It installs a Tor backdoor and spreads through SSH, AUR packages, and npm tokens.
How to fix CVE-2026-88932: upgrade multer to 2.4.0 Abort a multer disk upload before the storage engine names the file, and the complete write can still land…
We built the package registry for agentOS. npm install the infrastructure your agent needs.
We're thrilled to announce the release of the SharpAPI Node.js SDK Client—a powerful, AI-driven tool designed to seamlessly integrate workflow automation into your JS/Node projects.
Showing 4 of 4 stories
You're all caught up.
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news
Join 15,000+ AI enthusiasts