#npm
#npm

1 month ago

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

North Korean threat actors are using npm packages to spread BeaverTail malware and a new RAT loader, indicating advanced obfuscation techniques.

Information security

5 months ago

XML-RPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner

A software supply chain attack on npm packages has persisted for over a year, embedding malware that steals data and mines cryptocurrency.

fromArs Technica

9 months ago

Here's how carefully concealed backdoor in fake AWS files escaped mainstream notice

Sophisticated attackers embedded backdoors in fake AWS packages on NPM, highlighting the challenge in detecting such threats in open source repositories.

fromTechzine Global

Hackers abuse NPM code registries via Ethereum network

NPM registries are under attack from malicious packages leveraging typosquatting, targeting developers' systems.

287 malicious packages discovered affect prominent libraries.

Hackers utilize Ethereum smart contracts to obscure their true origins.

15 hours ago

Node JS

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

Three malicious npm packages targeting Cursor on macOS are stealing user credentials and distributing harmful upgrades to the software.

fromInfoWorld

'Package confusion' attack against NPM used to trick developers into downloading malware

Blockchain communication offers both advantages and drawbacks for malware C2, hindering its widespread use.

Node JS

1 month ago

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

North Korean threat actors are using npm packages to spread BeaverTail malware and a new RAT loader, indicating advanced obfuscation techniques.

Information security

5 months ago

XML-RPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner

A software supply chain attack on npm packages has persisted for over a year, embedding malware that steals data and mines cryptocurrency.

fromArs Technica

9 months ago

Here's how carefully concealed backdoor in fake AWS files escaped mainstream notice

Sophisticated attackers embedded backdoors in fake AWS packages on NPM, highlighting the challenge in detecting such threats in open source repositories.

fromTechzine Global

Hackers abuse NPM code registries via Ethereum network

NPM registries are under attack from malicious packages leveraging typosquatting, targeting developers' systems.

287 malicious packages discovered affect prominent libraries.

Hackers utilize Ethereum smart contracts to obscure their true origins.

15 hours ago

Node JS

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

Three malicious npm packages targeting Cursor on macOS are stealing user credentials and distributing harmful upgrades to the software.

How to Automatically Publish Your NPM Package Using GitHub Actions | HackerNoon

Automating npm package publishing through CI/CD increases quality, ensures consistent versioning, and streamlines collaboration among contributors.

Information security

BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

Three npm packages with North Korean malware were discovered, continuing a trend of targeting developers through supply chain attacks.