Hackers Deploy Malicious npm Packages on GitHub to Steal SSH Keys

Two malicious npm packages were discovered on the npm open source package manager, which leverages GitHub to store stolen Base64-encrypted SSH keys obtained from developer systems that installed the malicious npm packages. In recent weeks, two suspicious npm packages, namely warbeast2000 and kodiak2k, were discovered in multiple versions. As of writing, both the packages were removed […]

The post Hackers Deploy Malicious npm Packages on GitHub to Steal SSH Keys appeared first on GBHackers on Security | #1 Globally Trusted …

base64 computer security cyber security deploy developer encrypted github hackers keys malicious malicious npm manager npm open source package package manager packages ssh ssh keys steal stolen store systems