Researchers Uncover Malicious NPM Packages Stealing Data from Apps and Web FormsThe Hacker News

Torna a Articoli

Researchers Uncover Malicious NPM Packages Stealing Data from Apps and Web FormsThe Hacker News

A widespread software supply chain attack has targeted the NPM package manager at least since December 2021 with rogue modules designed to steal data entered in forms by users on websites that include them.
The coordinated attack, dubbed IconBurst by ReversingLabs, involves no fewer than two dozen NPM packages that include obfuscated JavaScript, which comes with malicious code to harvestRead More

Condividi questo post

Torna a Articoli