Fake 'distube-config' npm package drops Windows info-stealing malware

Sonatype has identified two npm packages distube-config and discordyt that typosquat open source packages like Discord modules, in an attempt to infect Windows users with a Trojan. Our security researcher, Juan Aguirre, who analyzed the malware shares some insights.

Article Link: Fake 'distube-config' npm package drops Windows info-stealing malware

1 post - 1 participant

Read full topic

article config discord drops fake infect info info-stealing malware insights link malware modules npm npm package open source open source packages package packages researcher security security researcher sonatype stealing trojan windows