Fake Express Packages on npm Spread a Linux Worm
Lobsters·2 points·Yogthos·about 22 hours ago·safedep.io
Nine fake Express and React packages on npm run a Linux worm at install time. It installs a Tor backdoor and spreads through SSH, AUR packages, and npm tokens.
Read the full article at safedep.io →
Related stories
- Hacker News · 1 points · 1 day ago
- Hacker News · 1 points · 1 day ago
- The lightweight Arch Linux based distro that runs, without root privileges, upon any Linux distrogithub.comLobsters · 12 points · over 4 years ago
- Hacker News · 4 points · 8 days ago
- Hacker News · 1 points · 8 days ago
- Alpine Linux 3.6.0 Releasedalpinelinux.orgLobsters · 31 points · over 9 years ago