An ongoing attack is uploading hundreds of malicious packages to the open source node package manager (NPM) repository in an attempt to infect the devices of developers who rely on code libraries ...
The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to appear authentic.
Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback