This Week in Malware—killing Windows Defender with an npm package

This Week in Malware, highlights include malicious npm package 'flame-vali' that claims to let developers "bypass any request proxys." But that's not quite the case. And, some more dependency confusion packages caught by us.

defender devzone firewall malware malware prevention nexus firewall npm npm package package this week in malware vulnerabilities windows windows defender