Supply Chain Attack Hits Dozens of npm Packages via binding.gyp

A large-scale npm supply chain attack has compromised at least 57 packages across more than 286 malicious versions in a rapid, coordinated campaign that unfolded in under two hours on June 3, 2026. The attack began at approximately 23:30 UTC with the compromise of @vapi-ai/server-sdk, the official Vapi.ai voice AI SDK with over 408,000 monthly […]

The post Supply Chain Attack Hits Dozens of npm Packages via binding.gyp appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.