36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads to facilitate Redis and PostgreSQL exploitation, deploy reverse shells, harvest credentials, and drop a persistent implant. "Every package con

Related Stories

🔒Security

AI-Assisted Supply Chain Attack Targets GitHub

2 days ago

🔒Security

Axios Attack Shows Social Complex Engineering Is Industrialized

2 days ago

🔒Security

Fortinet Issues Emergency Patch for FortiClient Zero-Day

2 days ago

🔒Security

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

2 days ago