npm Supply Chain Attack Exposes Devs to “Scavenger” Malware Via Phished Accounts
A major incident has rocked the npm ecosystem: the widely-used package eslint-config-prettier suddenly received an update devoid of any corresponding changes on GitHub. Developers quickly grew suspicious—and with good reason. The package’s maintainer later...
The post npm Supply Chain Attack Exposes Devs to “Scavenger” Malware Via Phished Accounts appeared first on Penetration Testing Tools.