Update to November’s Crypto-Themed npm Attack

Back in November, we published a write-up about a collection of npm packages involved in a complex attack chain. These packages, once installed, would download a remote file, decrypt it, execute an exported function from it, and then meticulously cover their tracks by deleting and renaming files. This left the

attack attack chain back collection crypto decrypt download file files function november npm packages research update write-up