Hundreds of Code Libraries on NPM Attempt to Install Malware on Developer Machines
A recent analysis by Phylum has uncovered a series of malicious packages, pointing to an IP address affiliated with a notable threat actor: This investigation reveals that, while the attackers aimed to obscure their infrastructure for second-stage infections, their strategy inadvertently left a digital breadcrumb trail of previously utilized…