In what is the newest occasion of a software program provide chain assault, unknown risk actors managed to compromise Toptal’s GitHub group account and leveraged that entry to publish 10 malicious packages to the npm registry.
The packages contained code to exfiltrate GitHub authentication tokens and destroy sufferer techniques, Socket mentioned in a report revealed final week. As well as, 73 repositories
Hackers Breach Toptal GitHub, Publish 10 Malicious npm Packages With 5,000 Downloads
