sonatype.com

Inside a 176-Package npm Campaign Built to Beat Your Internal Dependencies (opens in new tab)

Covered by 5 sources See all sources covering this story including SecurityWeek, The Hacker NewsDiscussed on Hacker News

A 176-package npm malware campaign used dependency confusion and install-time scripts to steal credentials and compromise developer and CI/CD environments.

Read the original article
Sign in to keep reading the full article.
Sign UpLog In

Covered in 5 articles

SecurityWeek·

In Other News: Trump Mobile Data Breach, FIFA World Cup Phishing, CISA Responds to Supply Chain Attacks

Feeds
The Hacker News·

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

Feeds
Malware Analysis, News and Indicators·

Inside a 176-Package npm Campaign Built to Beat Your Internal Dependencies

Feeds
View all 5 ›

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help