Alerts Events DCR

Go to listing page

Malicious Packages Found Hidden in NPM Registry

Some packages exfiltrate data via webhooks or file-sharing links, while others scan for sensitive files and directories. Users are advised to be cautious and watch for suspicious install scripts.

Npm
Supply Chain Threats
JavaScript
Credential Theft
Information stealer

Publisher