This Week in Malware—npm malware exfiltrates Windows SAM, Amazon EC2 credentials

This Week in Malware, we continue to see an uptick in outright malicious and dependency confusion packages employing novel tactics. A list of some of the packages caught by Sonatype's automated malware detection systems is given below and more analysis is expected to follow in subsequent blog posts next week.

amazon credentials devzone ec2 malware malware prevention nexus firewall npm pypi python sam this week in malware vulnerabilities windows