NPM flooded with malicious packages downloaded more than 86,000 times

arstechnica.com

cross-posted to:
lobsters@lemmy.bestiver.se

NPM flooded with malicious packages downloaded more than 86,000 times

arstechnica.com

cm0002 to

cybersecurity · 5 months ago

cross-posted to:
lobsters@lemmy.bestiver.se

Packages downloaded from NPM can fetch dependencies from untrusted sites.

You must log in or # to comment.

Chat

cybersecurity

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@infosec.pub

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

215 users / day
257 users / week
514 users / month
1.97K users / 6 months
918 local subscribers
6.05K subscribers
1.06K Posts
2.33K Comments
Modlog