TurkoRAT malware lurking in NPM packages

BleepingComputer reports that three malicious NPM packages mimicking NodeJS libraries, which have accumulated more than 1,200 downloads during the past two months, have been distributing the TurkoRAT information-stealing malware.

bleepingcomputer downloads information malicious malicious npm malware npm packages reports stealing turkorat vulnerability management