Rspack Supply Chain Attack Injects Cryptojacking Malware Into Npm Ecosystem

By switzerlandersing On Sep 11, 2025

Supply Chain Attack: Preventing Ransomware Attacks On The Supply Chain | Maryville Online

Supply Chain Attack: Preventing Ransomware Attacks On The Supply Chain | Maryville Online The developers of rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware. Breach of npm threatens billions of weekly downloads in javascript ecosystem massive supply chain attack compromised open source js packages to steal cryptocurrency by alfonso maruccia today 9:47 am.

Supply Chain Attack On Rspack Npm Packages Injects Cryptojacking Malware | Cyware Alerts ...

Supply Chain Attack On Rspack Npm Packages Injects Cryptojacking Malware | Cyware Alerts ... A massive supply chain attack compromised 18 highly popular npm packages, which collectively received two billion weekly downloads, deploying sophisticated browser based malware designed to steal. Software packages with more than 2 billion weekly downloads hit in supply chain attack incident hitting npm users is likely the biggest supply chain attack ever. A phishing led npm supply chain attack briefly compromised 18 popular packages (~2.6b weekly downloads), injecting code to hijack crypto wallet transactions. malicious versions were live for ~2.5 hours on sept 8, 2025, before removal. learn the impact, affected packages, iocs, and steps to secure builds, dependencies, and developer accounts. Rspack, a popular high performance javascript bundler written in rust, has been hit with a supply chain attack, affecting two of its npm packages, including @ rspack/core and @rspack/cli.

Npm Supply Chain Attack Targeting Germany-Based Companies

Npm Supply Chain Attack Targeting Germany-Based Companies A phishing led npm supply chain attack briefly compromised 18 popular packages (~2.6b weekly downloads), injecting code to hijack crypto wallet transactions. malicious versions were live for ~2.5 hours on sept 8, 2025, before removal. learn the impact, affected packages, iocs, and steps to secure builds, dependencies, and developer accounts. Rspack, a popular high performance javascript bundler written in rust, has been hit with a supply chain attack, affecting two of its npm packages, including @ rspack/core and @rspack/cli. The rspack ecosystem, known for its high performance javascript bundler written in rust, has become the latest victim of a supply chain attack. the breach impacted two widely used npm packages, @rspack/core and @rspack/cli, which were tampered with to include cryptojacking malware. A significant supply chain security breach has been uncovered by cybersecurity researchers at sonatype and socket, affecting three widely used npm packages: @rspack/core, @rspack/cli, and vant. In recent developments within the software development community, the rspack npm packages have come under scrutiny due to a supply chain attack that has introduced crypto mining malware into the ecosystem. The maintainers of rspack have disclosed a security breach impacting two of their npm packages, @rspack/core and @rspack/cli, in a software supply chain attack.

Supply Chain Attack Prevention | Vectra AI

Supply Chain Attack Prevention | Vectra AI The rspack ecosystem, known for its high performance javascript bundler written in rust, has become the latest victim of a supply chain attack. the breach impacted two widely used npm packages, @rspack/core and @rspack/cli, which were tampered with to include cryptojacking malware. A significant supply chain security breach has been uncovered by cybersecurity researchers at sonatype and socket, affecting three widely used npm packages: @rspack/core, @rspack/cli, and vant. In recent developments within the software development community, the rspack npm packages have come under scrutiny due to a supply chain attack that has introduced crypto mining malware into the ecosystem. The maintainers of rspack have disclosed a security breach impacting two of their npm packages, @rspack/core and @rspack/cli, in a software supply chain attack.

NPM Account Takeover Results In Crypto Supply Chain Attack

NPM Account Takeover Results In Crypto Supply Chain Attack In recent developments within the software development community, the rspack npm packages have come under scrutiny due to a supply chain attack that has introduced crypto mining malware into the ecosystem. The maintainers of rspack have disclosed a security breach impacting two of their npm packages, @rspack/core and @rspack/cli, in a software supply chain attack.

NPM Account Takeover Results In Crypto Supply Chain Attack