More malicious npm packages found in wake of JumpCloud supply chain hack

Two weeks after the IT management firm JumpCloud announced that it was the victim of a supply chain attack aimed at a small population of customers in the cryptocurrency industry, an investigation by ReversingLabs researchers has uncovered evidence of more malicious npm packages, with links to the same infrastructure that also appear to target cryptocurrency providers.

attack cryptocurrency customers hack industry investigation it management jumpcloud links malicious malicious npm management npm packages researchers reversinglabs software supply chain security supply supply chain supply chain attack supply chain hack victim