#npm-supply-chain
#npm-supply-chain
[ follow ]
#react #prompt-injection #environment-exfiltration #ai-evasion #ottercookie #beavertail #north-korea #malware
Information security
fromThe Hacker News
1 week agoNorth Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware
North Korean threat actors published 197 malicious npm packages delivering OtterCookie/BeaverTail malware that establishes C2 and steals credentials, clipboard, keystrokes, screenshots, and wallets.
Information security
fromIT Pro
2 weeks agoShai-Hulud malware is back with a vengeance and hit more than 19,000 GitHub repositories so far - here's what developers need to know
Shai-Hulud worm infects npm packages, compromising ~700 packages and over 19,000 GitHub repositories to exfiltrate credentials, spread malicious payloads, and delete user files.
fromTechzine Global
4 weeks agoCritical vulnerability exposed in JavaScript library expr-eval
A critical security vulnerability in the popular JavaScript library expr-eval allows remote code execution. The bug, with a CVSS score of 9.8, affects hundreds of projects and is forcing developers to migrate to a secure version quickly. The vulnerability, registered as CVE-2025-12735, is listed in the US National Vulnerability Database (NVD) and is considered one of the most serious security issues in recent JavaScript ecosystems.
Information security
Information security
fromIT Pro
1 month agoHackers are using these malicious npm packages to target developers on Windows, macOS, and Linux systems - here's how to stay safe
Typosquatted npm packages delivered a PyInstaller 24MB infostealer across Windows, macOS, and Linux using multi-layer obfuscation, fake CAPTCHA, and IP fingerprinting.
[ Load more ]