DirtyBlanket: Fake Express Packages on NPM Spread a Linux Worm | Hacker News - But Better

DirtyBlanket: Fake Express Packages on NPM Spread a Linux Worm safedep.io

Nine fake Express and React packages on npm run a Linux worm at install time. It installs a Tor backdoor and spreads through SSH, AUR packages, and npm tokens.

2 points•kunalsin9h•1 day ago•0 comments•

#npm #packages #express #worm #linux #fake #fake express #linux worm

0 comments

No comments yet.

Related stories

Fake Express Packages on npm Spread a Linux Wormsafedep.io
Lobsters · 2 points · 1 day ago
DirtyBlanket: Fake Express Packages on NPM Spread a Linux Wormsafedep.io
Hacker News · 1 points · 1 day ago
The lightweight Arch Linux based distro that runs, without root privileges, upon any Linux distrogithub.com
Lobsters · 12 points · over 4 years ago
Show HN: Run Linux kernel drivers in userspace on Neptune OS, NT-like OS on seL4
Hacker News · 4 points · 8 days ago
Show HN: Open-source Express-like HTTP server in C++amsozzer.com
Hacker News · 1 points · 8 days ago
Alpine Linux 3.6.0 Releasedalpinelinux.org
Lobsters · 31 points · over 9 years ago