Packages

Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware

• Malicious NuGet Packages Stole ASP • NET Data; npm Package Dropped Malware Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

• Cybersecurity researchers have disclosed what they say is an active ‘Shai-Hulud-like’ supply chain worm campaign that has leveraged a cluster of at least 19 malicious npm package

Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems

• Cybersecurity researchers have discovered a fresh set of malicious packages across npm and the Python Package Index (PyPI) repository linked to a fake recruitment-themed campaign