Kryptovalutaticker:
sysadmin från 4sysops.com

Nearly 800 malicious npm packages hide RAT behind a simple require()

IT News
Aug 7, 2026 at 20:08
12 Visningar
0 Kommentarer
Nearly 800 malicious npm packages hide RAT behind a simple require()

Nearly 800 malicious npm packages are using README instructions—not npm lifecycle scripts—to launch a cross-platform RAT and infostealer when developers import them with `require()`. The campaign targets Windows, macOS, and Linux, with payload delivery backed by Cloudflare Workers and DNS TXT records. Source

Läs hela artikeln hos källan.

Läs originalartikeln

Delta i diskussionen — kommentera, rösta och dela länkar.

Registrera
Var detta hjälpsamt?
Dela:

Kommentarer (0)

Vänligen logga in eller registrera dig för att delta i diskussionen

Inga kommentarer ännu. Bli först med att kommentera!

Relaterade nyheter

MCP roadmap targets agent identity, event-driven agents, and smarter tool discovery
MCP roadmap targets agent identity, event-driven agents, and smarter tool discovery
7 hours ago
Specially Crafted NTFS File-System Image Allows Root Access On Linux With NTFS3 Driver
8 hours ago
5 things about NAT I wish someone had explained sooner
5 things about NAT I wish someone had explained sooner
9 hours ago
AMD RDNA 4m Firmware Published For Linux Ahead Of Launch
10 hours ago
It wasn’t my photos or files — this one thing was eating one-third of my Google Drive storage
It wasn’t my photos or files — this one thing was eating one-third of my Google Drive storage
10 hours ago

Bläddra efter kategori

blog crypto news privacy startup sysadmin technology