Malicious packages in the NPM designed for highly-targeted attacks

Researchers discovered a new set of malicious packages on the npm package manager that can exfiltrate sensitive developer data. On July 31, 2023, Phylum researchers observed the publication of ten different “test” packages on the npm package manager that were developed to exfiltrate sensitive developer source code and other confidential information. All of these packages […]

The post Malicious packages in the NPM designed for highly-targeted attacks appeared first on Security Affairs.

attacks breaking news code confidential cybercrime data developer hacking information information security news it information security july malicious malicious packages malware manager npm npm package package package manager packages phylum pierluigi paganini researchers source code supply chain attack targeted attacks test