#node-ipc

[ follow ]
#malware #supply-chain-attack #credential-theft #dns-tunneling #npm-malware #npm-supply-chain #dns-exfiltration
Node JS
fromnews.bitcoin.com
9 hours ago

822K Downloads at Risk: Malicious node-ipc Versions Spotted Stealing AWS and Private Keys

Three tainted node-ipc releases automatically steal developer and cloud credentials via DNS tunneling, affecting projects that installed or updated them.
Node JS
fromThe Cyber Express
15 hours ago

Node-ipc Npm Package Hit By Credential Stealer Attack

Malicious node-ipc npm releases used obfuscated code to fingerprint systems, steal files, encrypt data, and exfiltrate via DNS, with prior versions also compromised.
fromThe Hacker News
1 day ago

Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets

Early analysis indicates that node-ipc@9.1.6, node-ipc@9.2.3, and node-ipc@12.0.1 contain obfuscated stealer/backdoor behavior.
Node JS
[ Load more ]