A cluster of malicious npm packages has been used to deliver a cross-platform remote access trojan against developers who use Alibaba-related tools. The campaign hides its harmful code across several packages, making each part look ordinary when viewed on its own. The attack relies on package names that imitate private Alibaba packages and adds malicious […]
The post Malicious npm Packages Deploy Cross-Platform RAT Targeting Alibaba Developers appeared first on Cyber Security News.