Npm Supply Chain Malware Attack Targets Developers With Worm-Like Propagation

Npm Supply Chain Malware Attack Targets Developers With Worm-Like Propagation

Malicious npm packages spread via worm-like propagation and steal developer credentials This article has been indexed from www.infosecurity-magazine.com Read the original article: Npm Supply Chain Malware Attack Targets Developers With Worm-Like Propagation The post Npm Supply Chain Malware Attack Targets Developers With Worm-Like Propagation appeared first on IT Security News.

CanisterSprawl Worm Turns npm Developers into Malware Vectors in Latest Supply Chain Onslaught

Canister-Backed npm Malware Campaign Expands, Targeting AI Developer Toolchains

A new wave of supply chain attacks is hitting the npm ecosystem, and this time the blast radius is moving deeper into AI developer workflows. Security researchers at Socket say the latest campaign shows strong overlap with a previously identified wormable attack dubbed CanisterWorm, suggesting either a shared operator or direct reuse of adversary tooling.At the center of the incident are compromised packages tied to Namastex Labs, a company that…