Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack

Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack

/in

Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project maintainers’ npm tokens.
The captured tokens were then used to publish malicious versions of the packages directly to the registry without any source code commits or pull requests on their respective GitHub repositories.
The list of affected

The Hacker News – ​Read More

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global...Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global OrganizationsChinese Groups Launder $580M in India Using Fake Apps and Mule Accounts