Hackers Compromise 170 npm Packages to Steal GitHub, npm, AWS, and Kubernetes Secrets

A sprawling supply chain attack has put software developers worldwide on high alert after hackers compromised more than 170 npm packages and two PyPI packages in a coordinated credential theft campaign. The infected packages are collectively downloaded over 200 million times per week, making the potential blast radius enormous. The threat group behind the campaign, […]

The post Hackers Compromise 170 npm Packages to Steal GitHub, npm, AWS, and Kubernetes Secrets appeared first on Cyber Security News.