Hackers Created 250 npm Packages, Mimicking Popular AWS And Microsoft Projects

Hackers target and abuse npm packages to inject malicious code into widely used software libraries, reaching many developers and applications. Sonatype security researchers recently identified more than 250 npm packages that mimic popular AWS, Microsoft, and other open-source projects. A Russian hacker who alleges to be a bug bounty hunter is responsible for creating these […]

The post Hackers Created 250 npm Packages, Mimicking Popular AWS And Microsoft Projects appeared first on Cyber Security News.

abuse applications aws bounty bug bug bounty code cyber-attack developers hacker hackers inject libraries malicious malware microsoft mimic npm npm security open-source vulnerabilities packages popular projects researchers russian russian hacker security security researchers software software libraries sonatype supply chain attacks target vulnerability