Prevalence (%)IncidentsSupply Chain Attack on npm Packages via Maintainer PhishingGhostAction campaignShai-Hulud: Ongoing Package Supply Chain Compromise Delivering Data-Stealing MalwareLast editedMay 18, 2025 5:58 AMCISA KEVMetasploitNucleiNo. IncidentsTechniquesSlopsquattingPackage dependency confusion