Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

/in

Cybersecurity researchers have uncovered a new suspicious package uploaded to the npm package registry that’s designed to drop a remote access trojan (RAT) on compromised systems.
The package in question is glup-debugger-log, which targets users of the gulp toolkit by masquerading as a “logger for gulp and gulp plugins.” It has been downloaded 175 times to date.
Software supply chain security

The Hacker News – ​Read More

How Do Password Managers Work and Why Do You Need One?Authorities Ramp Up Efforts to Capture the Mastermind Behind EmotetAuthorities Ramp Up Efforts to Capture the Mastermind Behind Emotet