Malicious Packages Disguised as JavaScript Libraries Found
Researchers at open-source software firm Sonatype have uncovered multiple malicious packages that disguise themselves as legitimate JavaScript libraries on npm
Devicesprajeet Nair Ali Elshakankiry Solarwinds Orion Blockchain Cryptocurrency Pascal Geenens Uptycs Threat Research
Source: govinfosecurity.com