Wormable Malware Causing Supply Chain Compromise of npm Code Packages
On September 15, 2025, reports surfaced that the widely used npm package @ctrl/tinycolor had been compromised by malware as part of a broader supply chain attack affecting over 180 packages. Reports surfaced that the widely used npm package @ctrl/tinycolor had been compromised by Wormable Malware as part of a broader supply chain attack affecting over 40 packages initially, with […]