The latest malware campaign uncovered by Sonatype researchers involved 176 malicious npm packages, many published with the exact same version number: 99.99.99 .
Inside a 176-Package npm Campaign Built to Beat Your Internal Dependencies
calendar_today
May 28, 2026
domain
sonatype