Topic

#malicious npm packages

2 articles found

Malicious npm Packages Target Developers: Protect Your Credentials

Security researchers at JFrog have identified a set of malicious npm packages linked to North Korean threat actors that impersonate legitimate Rollup polyfill tooling to steal developer credentials and enable remote access to compromised machines. The packages, named “rollup-packages-polyfill-core”

#malicious npm packages#developer credentials#cybersecurity threats#india tech ecosystem#software supply chain

· · The Hacker News

Malicious npm Packages Discovered: Protect Your Code Now

Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT). The list of identified packages, is below - aes-decode-runner-pro (145 downloads) postcss-minify-selector (256 downloads) postcss-minify-selector-parser

#malicious npm packages#security threats#remote access trojan#javascript vulnerabilities#india tech ecosystem