Home/Tag/Npm

#Npm

2 articles tagged with "Npm"

Jan 9, 2026•4 min read

jsPDF Flaw Lets Attackers Embed Local Files in PDFs

CVE-2025-68428 enables path traversal in the popular JavaScript PDF library, allowing attackers to read arbitrary files from Node.js servers and exfiltrate them via generated documents.

Marcus Chen

Malware4 min read

Malicious npm Package 'lotusbail' Hijacked WhatsApp Accounts for Six Months

Supply chain attack disguised as working WhatsApp API library stole credentials, messages, and linked attacker devices to victim accounts. 56,000+ downloads since May.

James RiveraDec 28, 2025