KEY SUMMARY POINTS
Compromised npm Packages: On December 20, 2024, attackers used a hijacked npm token to compromise well-liked npm packages @rspack/core, @rspack/cli, and “vant,”...
Dec 20, 2024Ravie LakshmananMalware / Provide Chain Assault
The builders of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, had been...
Three fashionable npm packages, @rspack/core, @rspack/cli, and Vant, have been compromised by way of stolen npm account tokens, permitting risk actors...