Malicious npm Campaign Hijacks 42 GitHub Repositories to Steal Credentials and Spread Malware

Research has identified 42 weaponized GitHub repositories belonging to 11 legitimate owners in the testmetest npm campaign, exposing an operation that combines credential theft, development-tool execution hooks, and malicious package publishing. The findings establish that the campaign extended beyond attacker-controlled test packages into established developers’ repositories. Researchers Guy Korolevski and Yair Benamou uncovered oversized payload […]

Read the original article:

Malicious npm Campaign Hijacks 42 GitHub Repositories to Steal Credentials and Spread Malware