Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...
New malicious NPM packages have been discovered that install the njRAT remote access trojan that allows hackers to gain control over a computer. NPM is a JavaScript package manager that allows ...
A new malicious npm campaign using fake installation logs to hide malware activity has been identified by security ...
The popular JavaScript HTTP client Axios has been compromised in a supply chain attack, exposing projects to malware through ...
The security team behind the "npm" repository for JavaScript libraries removed two npm packages this Monday for containing malicious code that installed a remote access trojan (RAT) on the computers ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results