Thursday, February 24, 2022

25 Malicious JavaScript Libraries Distributed via Official NPM Package Repository

Another batch of 25 malicious JavaScript libraries have made their way to the official NPM package registry with the goal of stealing Discord tokens and environment variables from compromised systems, more than two months after 17 similar packages were taken down. The libraries in question leveraged typosquatting techniques and masqueraded as other legitimate packages such as colors.js,
http://dlvr.it/SKZhQT

No comments:

Post a Comment

CISA says SonicWall bug being exploited as experts warn of ransomware gang use - The Record from Recorded Future News

CISA says SonicWall bug being exploited as experts warn of ransomware gang use  The Record from Recorded Future News http://dlvr.it/TD4N1S