DevHacker Noonabout 6 hours ago
Malicious npm Packages Target Mac Developers
20 min read
Malicious npm packages now pose a major macOS threat, bypassing Apple's Gatekeeper and running with user permissions via npm install. Sonatype found 454,600 new malicious packages in 2025, a 188% year-over-year rise, with 99.8% originating from npm. Attacks like the @solana/web3.js compromise stole $160,000 in SOL.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
