Cybersecurity researchers have flagged a provide chain assault focusing on over a dozen packages related to GlueStack to ship malware.
The malware, launched by way of a change to “lib/commonjs/index.js,” permits an attacker to run shell instructions, take screenshots, and add recordsdata to contaminated machines, Aikido Safety informed The Hacker Information, stating these packages collectively account for practically 1
New Provide Chain Malware Operation Hits npm and PyPI Ecosystems, Focusing on Hundreds of thousands Globally
