FeedBagel

All Topics

Art

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

[email protected] (The Hacker News)

1d ago

Source

thehackernews.comNorth Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secretsthehackernews.com

Snippet from the RSS feed

Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. According to JFrog, the packages "rollup-packages-polyfill-core" and "rollup-runtime-polyfill-core" mimic the legitimate "rollup-plugin-polyfill-node" project, down to the description, repository metadata, and

You might also wanna read

Red Hat npm packages compromised to steal developer credentials

bleepingcomputer.com·1mo ago

Microsoft detects 14 malicious npm packages impersonating OpenSearch and Elasticsearch libraries

A threat actor using the alias vpmdhaj published 14 malicious npm packages within four hours, impersonating legitimate OpenSearch, Elasticse

theregister.com·1mo ago

Microsoft detects 14 malicious npm packages impersonating OpenSearch and Elasticsearch libraries

A threat actor using the alias vpmdhaj published 14 malicious npm packages within four hours, impersonating legitimate OpenSearch, Elasticse

theregister.com·1mo ago

Malicious npm package "Codex" stole developer credentials for a month before detection

A popular npm package called "Codex" (providing a remote web UI for OpenAI Codex) was found to be stealing developer credentials for about a

briefly.co·1mo ago

Security Alert: Malicious Nx Packages Published to npm Containing Credential-Stealing Code

Malicious versions of the Nx package and several supporting plugins were published to npm, containing code that scans file systems, collects

github.com·10mo ago

176 malicious npm packages used dependency confusion to target internal dependencies and steal credentials

Sonatype researchers uncovered a campaign involving 176 malicious npm packages using a dependency confusion attack strategy. Attackers publi

sonatype.com·1mo ago

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

BackBox.org·12h ago

Comments

No comments yet. Be the first.