Two Campaigns Drop Malicious Packages into NPM

The popular NPM code registry continues to be a target of bad actors looking to sneak their malicious packages into open-source code used by software developers. Researchers with Fortinet’s FortiGuard Labs this week said they found almost three dozen malicious packages in the registry that contain scripts that make them difficult to be detected and..

The post Two Campaigns Drop Malicious Packages into NPM appeared first on Security Boulevard.

bad bad actors campaigns code cybersecurity data security developers devops featured fortinet found industry spotlight labs malicious malicious code npm malicious packages malware network security npm open source software supply chain packages popular registry researchers scripts security boulevard (original) software software developers source code spotlight target threat intelligence week