npm packages caught exfiltrating Kubernetes config, SSH keys

The Sonatype Security Research team is currently tracking an ongoing campaign on the npm registry that uses npm packages to retrieve and exfiltrate your Kubernetes configuration and SSH keys to an external server.

campaign caught configuration devzone external keys kubernetes malware analysis npm packages registry research security security research server sonatype ssh ssh keys team tracking