Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...
Aikido Security says an npm supply chain attack has infected Keyv packages with a variant of the credential-stealing Shai-Hulud malware. The security firm reports that attackers have compromised the ...
Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly ...
A Keyv-linked npm worm poisoned 353 versions across 79 package names, stealing developer and CI credentials while repository ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results