105 Minutes of Stolen Access Turned a Trusted npm Package Into a Multi-Stage Malware Loader
Attackers hijacked a maintainer account for just 105 minutes to slip a hidden loader into a popular npm package, abusing legitimate publishing infrastructure so the poisoned release carried valid provenance. The GHAPPIER campaign, uncovered by researchers at CloudSEK, touched 65 GitHub repositories and used an Ethereum blockchain transaction as its command channel. The post 105 Minutes of Stolen Access Turned a Trusted npm Package Into a Multi-Stage Malware Loader appeared first on Secure Bulletin.
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.