Typosquatting campaign on NPM platform leverages open-source tools

ReversingLabs points out that these type of malicious supply chain attacks are now available to low-skill threat actors and script kiddies.

attacks campaign devsecops low malicious malware npm platform points reversinglabs script script kiddies supply supply chain supply chain attacks third-party-code threat threat actors tools typosquatting