This Week in Malware— Cryptominers Flood npm, PyPI, and More Dependency Confusion

This Week in Malware we are disclosing upwards of 240 PyPI and npm packages, the majority of which are typosquats dropping malicious cryptominers, along with some dependency confusion PoCs.

cryptominers dependency dependency confusion devzone flood malware malware prevention npm pypi this week in malware vulnerabilities