BlackCat 3.0 Ransomware Is Crippling Businesses: What You Need to Know
BlackCat 3.0 ransomware is hitting companies worldwide with advanced encryption and double extortion. Learn how it works and how to stay protected.
Incidents
The Great NPM Heist: Supply Chain Attack Rocks the JavaScript World
Unprecedented NPM supply chain attack: 18+ popular packages hijacked, putting over 2 billion weekly downloads at risk. The target: crypto wallets.
An Attack on the Heart of the JavaScript Ecosystem
The developer world was shaken to its core by news of a brazen supply chain attack on the NPM registry, the heart of the JavaScript ecosystem. On September 8, 2025, a group of attackers took control of more than 18 key libraries. Each one sees millions of downloads, and together they account for more than 2 billion downloads a week. It ranks among the largest and potentially most destructive attacks of its kind ever recorded.
How Did It Happen? The Target: Crypto Wallets
All signs point to phishing as the way in: the attackers hijacked the accounts of developers who maintain popular packages. Once inside, they injected malicious code into the libraries with one main goal: stealing cryptocurrency. The modified code was built to find and drain cryptocurrency wallets on infected machines.
It's a textbook supply chain attack. Instead of going after thousands of targets one by one, the hackers struck a single shared source that millions of people download software from. Think of someone poisoning the main water supply instead of running around town with a bottle of poison. The blast radius is in a different league.
The Response and What Comes Next
The developer community and security teams moved fast and removed the infected package versions. Still, the incident is a harsh reminder of how fragile the open-source ecosystems behind today's digital world can be. The story is still developing, and the full extent of the damage is still being assessed. One thing is certain: the debate over security in NPM and similar registries will flare up again. Sometimes it takes a small fire to remind everyone about the fire safety rules.
Source: breached.company
Related articles: Supply chain attacks are becoming more and more common. A similar scenario played out in the cyberattack on European airports, where an attack on a software vendor paralyzed half of Europe. Also read about the NIS2 Directive, which requires supply chain security in critical infrastructure.
