Malicious NPM Packages Snatch Data from Apps and Website Forms, Researchers Say

Since at least December 2021, the NPM package manager has been the target of a pervasive software supply chain attack that used rogue modules to obtain information from forms that users filled out on websites that include them. Named IconBurst by security vendor ReversingLabs, the coordinated cyberattack involves no less than 24 NPM packages that […]

The post Malicious NPM Packages Snatch Data from Apps and Website Forms, Researchers Say appeared first on Heimdal Security Blog.

apps cybersecurity news data forms malicious malicious npm npm researchers snatch website