all InfoSec news
Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain Attack
Oct. 4, 2023, 11:16 a.m. | info@thehackernews.com (The Hacker News)
The Hacker News thehackernews.com
The package in question is node-hide-console-windows, which mimics the legitimate npm package node-hide-console-window in what's an instance of a typosquatting campaign. It was downloaded 704
attack called console hidden hide instance node npm npm package package question registry rogue rootkit supply supply chain supply chain attack uncovered window windows
More from thehackernews.com / The Hacker News
Jobs in InfoSec / Cybersecurity
Social Engineer For Reverse Engineering Exploit Study
@ Independent study | Remote
Application Security Engineer - Remote Friendly
@ Unit21 | San Francisco,CA; New York City; Remote USA;
Cloud Security Specialist
@ AppsFlyer | Herzliya
Malware Analysis Engineer - Canberra, Australia
@ Apple | Canberra, Australian Capital Territory, Australia
Product CISO
@ Fortinet | Sunnyvale, CA, United States
Manager, Security Engineering
@ Thrive | United States - Remote