Ghost Campaign Uses npm to Steal Crypto
Read More: buff.ly/N4NYXqk

#GhostCampaign #npmSecurity #SupplyChainAttack #CryptoTheft #MaliciousPackages #DeveloperSecurity #macOSMalware #LinuxSecurity

The Return of PhantomRaven: Detecting Three New Waves of npm Supply Chain Attacks | Blog | Endor Labs Endor Labs security researchers identified 88 malicious open source packages belonging to three new waves of the PhantomRaven campaign.

#PhantomRaven is back 👻🐦‍⬛ We found 3 new waves distributing 88 #maliciouspackages (81 still live on npm). Packages look clean, but a hidden URL in package.json pulls credential-stealing malware.
www.endorlabs.com/learn/return...

In that article, Darren lays out the problem as well as a strategy for putting controls in place that make your developers' lives easier while adding significant protection against the risk of #maliciousPackages through well-designed controls and lightweight policies

27 Malicious Npm Phishing Packages Steal
Rad More: buff.ly/TNtJ2id

#NPMSupplyChain #MaliciousPackages #PhishingCampaign #DeveloperSecurity #OpenSourceAbuse #CredentialTheft #CriticalInfrastructure #ThreatResearch

And of course, as always, we appreciate the support of Microsoft and OpenVSX, both of whom responded promptly and professionally.

#SupplyChainSecurity #MaliciousPackages #DeveloperSecurity #SoftwareSupplyChain #ExtensionSecurity #VisualStudioCode

Seven Malicious NPM Packages Use Adspect to Redirect to Crypto Scams Cybersecurity researchers have uncovered seven malicious JavaScript packages on NPM that utilize Adspect, a commercial cloaking service. These packages are

Seven Malicious NPM Packages Use Adspect to Redirect to Crypto Scams

#Adspect #cryptoscams #JavaScript #maliciouspackages #NPM

MPIAPI users blocking identified malware will already have these packages stopped.
This campaign shows no sign of slowing. Share awareness and keep dependencies clean.

#CyberSecurity #DevSecOps #NorthKorea #MaliciousPackages 🧵6/6

Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks file holding the malicious payload read more about Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks

Malicious npm Package Modifies Local ‘ethers’ Library to Launch Reverse Shell Attacks reconbee.com/malicious-np...

#maliciousnpmpackages #maliciouspackages #reverseshellattacks #cyberattacks

Sophisticated npm Attack Highlights Software Supply Chain Vulnerabilities | The DefendOps Diaries Explore a sophisticated npm attack revealing software supply chain vulnerabilities and the need for enhanced security measures.

Sophisticated npm Attack Highlights Software Supply Chain Vulnerabilities

#npmattack
#softwaresupplychain
#cybersecurity
#opensourcesecurity
#maliciouspackages

Hackers Compromise Windows Systems Using 5000+ Malicious Packages A recent analysis by FortiGuard Labs has revealed a significant increase in malicious software packages, with over 5,000 identified.

Hackers Compromise Windows Systems Using 5000+ Malicious Packages
gbhackers.com/hackers-comp...

#Infosec #Security #Cybersecurity #CeptBiro #Hackers #WindowsSystems #MaliciousPackages