Nine fake Express and React packages on npm run a Linux worm at install time. It installs a Tor backdoor and spreads through SSH, AUR packages, and npm tokens.

1 points•thunderbong•about 24 hours ago•0 comments•

0 comments

No comments yet.

Related stories