Nearly 800 malicious packages have been discovered on the npm registry, deploying cross-platform remote access trojans (RATs) and infostealers targeting Windows, Mac, and Linux systems. The packages utilize AI-generated typo-squatting techniques to deceive developers into downloading compromised code. This campaign represents a significant supply chain security threat to enterprise development env
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. "These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer payload," OpenSourceMalware researcher Paul
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
