From PostCSS Masquerading to Windows RAT (opens in new tab)

Covered by 4 sources including Hackread, The Hacker News

JFrog Security Research analyzed a suspicious npm package named postcss-minify-selector-parser. The package impersonates the popular PostCSS selector-parser ecosystem and hides a multi-stage payload that downloads a Windows Python/Nuitka RAT.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 4 articles

Hackread·

Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords

The Hacker News·

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

Infosecurity Magazine·

Lookalike npm Package Hides a Multi-Stage Windows RAT

View all 4 ›