Sophisticated npm malware campaign exploits Cross-Ecosystem typosquatting
A coordinated malware operation targeting npm employs cross-ecosystem typosquatting to mimic popular libraries from Python, Java, C++, and .NET ecosystems. Attackers uploaded packages like beautifulsoup4 (masquerading as Python’s BeautifulSoup) and apache-httpclient (impersonating Java’s Apache HttpClient), leveraging developers’ familiarity with tools from other languages. Technical breakdown Payload obfuscation:Packages use layered obfuscation, including numeric array manipulation and […]
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.