PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments

Visit Link

Great! Sly loading via npm modules. Well, good thing my PyPi modules are so out of date!!

Cybersecurity researchers from SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download additional payloads.

The packages in question are listed below –

eslint-config-airbnb-compat (676 Downloads)
ts-runtime-compat-check (1,588 Downloads)
solders (983 Downloads)
@mediawave/lib (386 Downloads)

All the identified npm packages have since been taken down from npm, but not before they were downloaded hundreds of times from the package registry.

Reactions

olvlabs

2012

This is my OLV Labs account. Engineering, Science, Tech, Humor, Snark, History, etc. etc. Experimenting in the Universes. Basically, a Lumnifat of topics. OMG, I'm not keeping a FOCUS on one area or topic??? How will I build an audience that will follow my whimsical posts and buy my merch? (-: Step 1) Get Merchandise; Step 2) Nap; Step 3) I'll get back to you...