Browsing Tag
NPM
3 posts
LofyLife: Malicious npm Packages Used in Siphoning Off Discord Tokens, Card Data
The malicious NPM packages used in this supply chain attack can steal Discord tokens and financial data. Discord,…
Cybercriminals hit malware authors with malicious NPM packages
Discord tokens have become the perfect medium for cybercriminals to gain unauthorized access to accounts allowing the operators…
CISA warns of trojanized versions of JavaScript library’s NPM package
The warning comes days after three rogue packages, okhsa, klow, and klown discovered by DevSecOps firm Sonatype, were removed from the NPM repository.