[SECURITY] node-ipc@12.0.1 CJS bundle contains obfuscated infostealer payload · Issue #15 (opens in new tab)

Covered by 3 sources including LeMondeInformatique, CSO OnlineDiscussed on Hacker News

The CommonJS entry point (node-ipc.cjs) in node-ipc@12.0.1 (npm shasum: fe5d107b9d285327af579259a32977c4f475fa26) contains a heavily obfuscated malicious payload appended after the legitimate esbui...

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

CSO Online·

Expired domain leads to supply chain attack on node-ipc npm package

stepsecurity.io·

Active Supply Chain Attack: Malicious node-ipc Versions Published to npm

Discussed on Hacker News

In other languages

LeMondeInformatique·

Covered in 3 articles

Expired domain leads to supply chain attack on node-ipc npm package

Active Supply Chain Attack: Malicious node-ipc Versions Published to npm

In other languages

Le paquet npm node-ipc compromis par une attaque supply chain