Smuggling Malware in Test Code

Phylum continues to discover malware polluting open-source ecosystems. In this blog post, we take a deep-dive into an npm package trying to masquerade as code profiler which actually installs several malicious scripts including a cryptocurrency and credential stealer. Curiously, the attacker attempted to hide the malicious code in a test

attacker blog blog post code credential credential stealer cryptocurrency discover dive ecosystems hide malicious malware npm npm package package phylum research scripts smuggling stealer test