Fake Express Packages on npm Spread a Linux Worm

Lobsters·2 points·Yogthos·about 22 hours ago·safedep.io

Nine fake Express and React packages on npm run a Linux worm at install time. It installs a Tor backdoor and spreads through SSH, AUR packages, and npm tokens.

Read the full article at safedep.io →

Related stories

Related topics