Tag: malicious npm packages
6 articles
Malicious npm Packages Deliver Overlord RAT and Stealer in Supply Chain Attack
A single malicious npm package, "function-flag," was downloaded a staggering 37,419 times in a supply-chain operation that delivered Remote Access Trojans and information stealers to Windows hosts. This was part of a larger campaign, dubbed MALFEX, where 12 packages were published to the npm registry since August 2023, with eight of them flagged as malicious and collectively downloaded over 40,767 times.
Malicious npm Packages Hijack Developers' WhatsApp Accounts
Beware of malicious npm packages that have been downloaded a staggering 490,000 times, hijacking developers' WhatsApp accounts and adding them to groups without consent. These 101 rogue packages exploit the popular Baileys WhatsApp open source project to pull off the scam.
Malicious npm Packages Evade Detection by Hiding in Runtime Code
A sneaky malicious npm package, indexed-btree, has been hiding in plain sight by disguising its loader inside ordinary library code, allowing it to evade detection and rack up millions of downloads. This cleverly crafted package mimicked a legitimate B-tree utility, but with a sinister twist that went undetected until it was removed from the npm registry.
Malicious npm Packages Target Alibaba Developers with Cross-Platform RAT
Researchers have uncovered a sneaky plot involving 18 malicious npm packages that deliver a cross-platform remote access trojan (RAT) to Alibaba developers, likely for industrial espionage. This targeted supply-chain operation zeroes in on Chinese-speaking environments, putting sensitive data at risk.
Malicious npm Packages Deliver Windows RAT via PostCSS Tooling
Beware of malicious npm packages masquerading as popular tools like PostCSS - researchers have uncovered three fake packages that have racked up over 1,000 downloads and deliver a sneaky Windows remote access trojan. These lookalike packages, published just over a month ago, have been cleverly designed to fly under the radar.
Shai Hulud Campaign Targets Developers with Malicious npm Packages
Malicious actors have unleashed a barrage of 84 tainted versions of popular software packages, cleverly disguising them with legitimate credentials to deceive developers. The Shai Hulud campaign, linked to the TeamPCP threat group, has been wreaking havoc on the software supply chain since September.