Alerts Events DCR

Go to listing page

Four Malicious NPM Packages Found Stealing User Info via GitHub

All four were misspellings of more popular packages, and they relied on users making mistakes when typing the name of a popular package in order to weasel their way inside someone's codebase.

JavaScript
npm Packages
malicious code
public GitHub page
electorn

Publisher