Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Patrick C Miller :donor: (patrickcmiller@infosec.exchange)'s status on Saturday, 10-May-2025 01:42:14 JST Patrick C Miller :donor:

Hackers booby trap NPM with cross-language imposter packages https://www.csoonline.com/article/3980073/hackers-booby-trap-npm-with-cross-language-imposter-packages.html
In conversation about 9 days ago from infosec.exchange permalink
Attachments
1. Domain not in remote thumbnail source whitelist: www.csoonline.com
  
  Hackers booby trap NPM with cross-language imposter packages
  
  Developers adept at multiple coding languages are tricked into installing a familiar-sounding package from within the Node Package Manager registry instead of the original source.
- Embed this notice
  2xfo (rndanger@infosec.exchange)'s status on Saturday, 10-May-2025 01:55:26 JST 2xfo
  in reply to
  
  @patrickcmiller
  How often does AI suggest these fake packages, i wonder 🤔
  
  In conversation about 9 days ago permalink

Feeds