This is a simple module that takes a JavaScript object and turns it into a GraphQL query to be sent to a GraphQL server. Mainly useful for applications that need to generate graphql queries ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

Income tax return AY 26-27: The Income Tax Department has launched Excel utilities and online filing for ITR-1 and ITR-4 for ...

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...

Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.

If you are building a simple dashboard or a form-based application, the traditional JSON API (REST or GraphQL) approach is ...

A fake repo impersonating the OpenAI Privacy Filter model racked up 244,000 downloads in under 18 hours before Hugging Face ...

The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...

Several SAP npm packages were exposed to a supply chain attack. The hacker group TeamPCP is behind it, say security researchers.