MALFEX, a persistent npm supply-chain campaign distributing Windows malware through eight malicious packages. Linked to an apparent single operator active since August 2023, the campaign delivers Overlord RAT, the movinlike information stealer, and a separate downloader concealed inside an ASCII-art utility. The largest contributor, function-flag, accounted for 37,419 downloads and has contained malicious code since […]

The post Malicious npm Packages Steal Browser Passwords, Discord Tokens and Crypto Wallets. appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

Source: gbHackers
Source Link: https://gbhackers.com/npm-supply-chain-campaign/