Four coordinated npm supply chain campaigns active in May–June 2026 — TTPs, IOCs, and detection notes
Documenting four campaigns that hit npm over the last two weeks. Posting for community awareness — IOCs and behavioral patterns below. Sonatype-2026-003429 — 176-package dependency confusion (May 28, 2026) Tracked by Son
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/netsec
Originally published by r/netsec. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.