A number of malicious packages have been uncovered throughout the npm, Python, and Ruby bundle repositories that drain funds from cryptocurrency wallets, erase total codebases after set up, and exfiltrate Telegram API tokens, as soon as once more demonstrating the number of provide chain threats lurking in open-source ecosystems.
The findings come from a number of reviews printed by Checkmarx,
Malicious PyPI, npm, and Ruby Packages Uncovered in Ongoing Open-Supply Provide Chain Assaults
