Socket on Mythryl: “🚨 Malicious update to @ctrl/tinycolor on npm is part of an active…”

🚨 Malicious update to @ctrl/tinycolor on npm is part of an active supply chain attack hitting 40+ packages across multiple maintainers. Audit & remove affected versions. Our analysis of the malware: socket.dev/blog/tinycol... #NodeJS #JavaScript

socket.devPopular Tinycolor npm Package Compromised in Supply Chain At...Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers

15/9/25, 11:23 pm20 reposts30 likes

Post