#npm
-
Compromised jscrambler npm package installed a Rust infostealer
Version 8.14.0 of the popular npm package jscrambler turned out to be compromised: when installed, it launched a malicious binary that stole data. The incident was spotted just six minutes after publication.
-
Crypto-wallet stealer planted in Injective SDK npm package
Attackers hacked the GitHub repository of the Injective Labs SDK project and used it to publish a malicious package to npm that steals private keys and seed phrases from crypto wallets.
-
Fake SDKs for the Paysafe and Skrill payment services found on NPM and PyPI
Malicious packages in the NPM and PyPI repositories masqueraded as SDKs for the Paysafe, Skrill and Neteller payment services, stealing the credentials of developers and users alike.