Encrypted npm Packages Found Targeting Major Financial Institution

Determining the intent behind a package publication is notoriously difficult. Is it a legitimate threat actor or a security researcher? We can rarely make this determination, so Phylum generally errs on the side of caution and annotates packages that exhibit characteristics congruent with malware-like behavior. Today is not such an

actor can encrypted financial found intent major malware npm package packages phylum research researcher security security researcher targeting threat threat actor today