News and Notes from the Makers of Nexus | Sonatype Blog | open source software supply chain (4)

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

8 minute read time

Heartbleed has put the security community on notice: it is time to take a harder look at the security status of open source components and frameworks.

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

4 Open Source Components You Need to Update Right Now

Secure your software supply chain

Subscribe for all the latest software security news and events