Malicious npm Package Modifies Local ‘ethers’ Library to Launch Reverse Shell Attacks reconbee.com/malicious-np...

#maliciousnpmpackages #maliciouspackages #reverseshellattacks #cyberattacks

Seven Malicious NPM Packages Use Adspect to Redirect to Crypto Scams

#Adspect #cryptoscams #JavaScript #maliciouspackages #NPM

Hackers Compromise Windows Systems Using 5000+ Malicious Packages
gbhackers.com/hackers-comp...

#Infosec #Security #Cybersecurity #CeptBiro #Hackers #WindowsSystems #MaliciousPackages

Ghost Campaign Uses npm to Steal Crypto
Read More: buff.ly/N4NYXqk

#GhostCampaign #npmSecurity #SupplyChainAttack #CryptoTheft #MaliciousPackages #DeveloperSecurity #macOSMalware #LinuxSecurity

27 Malicious Npm Phishing Packages Steal
Rad More: buff.ly/TNtJ2id

#NPMSupplyChain #MaliciousPackages #PhishingCampaign #DeveloperSecurity #OpenSourceAbuse #CredentialTheft #CriticalInfrastructure #ThreatResearch

#PhantomRaven is back 👻🐦‍⬛ We found 3 new waves distributing 88 #maliciouspackages (81 still live on npm). Packages look clean, but a hidden URL in package.json pulls credential-stealing malware.
www.endorlabs.com/learn/return...

Sophisticated npm Attack Highlights Software Supply Chain Vulnerabilities

#npmattack
#softwaresupplychain
#cybersecurity
#opensourcesecurity
#maliciouspackages

In that article, Darren lays out the problem as well as a strategy for putting controls in place that make your developers' lives easier while adding significant protection against the risk of #maliciousPackages through well-designed controls and lightweight policies

And of course, as always, we appreciate the support of Microsoft and OpenVSX, both of whom responded promptly and professionally.

#SupplyChainSecurity #MaliciousPackages #DeveloperSecurity #SoftwareSupplyChain #ExtensionSecurity #VisualStudioCode

MPIAPI users blocking identified malware will already have these packages stopped.
This campaign shows no sign of slowing. Share awareness and keep dependencies clean.

#CyberSecurity #DevSecOps #NorthKorea #MaliciousPackages 🧵6/6

North Korean Hackers Seed 108 Malicious Packages Across npm, Go, Packagist, and Chrome

https://blindthoughts.com/north-korea-polinrider-108-malicious-packages-npm-go-chrome

#supplychainsecurity #northkorea #npm #maliciouspackages #browserextensions