Post

This is starting to look like this may have significant implications. 18 popular packages affected so far. www.bleepingcomputer.com/news/securit...

bleepingcomputer.comHackers hijack npm packages with 2 billion weekly downloads in supply chain attackIn a supply chain attack, attackers have injected malware into NPM packages with over 2.6 billion weekly downloads after compromising a maintainer's account in a phishing attack.

SeanWrightSec

@seanwrightsec.com

So this does look to have limited impact. Looks to only target cryptocurrency, and the window for downloading most of the malicious packages is only a few hours.

8/9/25, 10:17 pm0 reposts0 likes

No replies yet.