Attackers took over the art-template npm package and used it to deliver a Coruna-like iOS Safari exploit framework. Socket Threat Research breaks down the package takeover, device fingerprinting, and exploit delivery chain: socket.dev/blog/coruna-...
socket.devCoruna Respawned: Compromised art-template npm Package Leads...Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.
1 repost4 likes