A widely used npm package with more than 822,000 weekly downloads has once again become the center of a serious supply chain attack, raising fresh concerns across the JavaScript ecosystem. Security researchers at Socket have uncovered multiple malicious versions of the popular node-ipc library containing stealthy credential-stealing malware and backdoor capabilities. The affected versions, [email protected], […]

The post Popular node-ipc npm Library Hit by Supply Chain Attack, Impacting 822K Weekly Downloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Source: gbHackers
Source Link: https://gbhackers.com/popular-node-ipc-npm-library-hit-by-supply-chain-attack/