Socket on Mythryl: “A fake corepack site at corepack[.]org is impersonating the Node.js…”

A fake corepack site at corepack[.]org is impersonating the Node.js Corepack tool and pushing malware to developers. The download button drops an infostealer that steals browser data and SSH keys, plus proxyware that turns your machine into a proxy node. socket.dev/blog/fake-co...

socket.devFake Corepack Site Distributes Infostealer and Proxyware to ...A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

24/7/26, 6:30 pm7 reposts17 likes

Post