Cybersecurity researchers have identified 18 malicious npm packages targeting Alibaba developer tool users with a cross-platform remote access trojan (RAT). The attack represents a sophisticated software supply chain compromise specifically aimed at Chinese-speaking development environments, with one package named 'lib-mtop' mimicking a legitimate private Alibaba package.
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments. One of the packages in question is "lib-mtop," an unscoped package with the same name as a private Alibaba package
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
