New Npm Malware Finds a Way Around Install Script Defenses
11 Articles
11 Articles
CSO Online
InfoWorldNew npm malware finds a way around install script defenses
Blocking suspicious install scripts may no longer be enough to mitigate threats from malicious JavaScript dependencies used in software supply-chain attacks. Security researchers at Checkmarx are warning of attackers using a malicious package called “indexed-btree” to impersonate the legitimate sorted-btree library, to spread malware hidden in the package’s normal runtime code. The campaign abandons the preinstall and postinstall scripts common …
BleepingComputer
cybernoz.comMalicious npm packages evade install-script defenses at runtime
An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than in installation scripts.
Checkmarx Zero has released a new attack on npm packages. The most worrying thing is that the latest security measures deployed in npm v12 are already partially bypassed and especially the preinstall and postinstall restrictions. The compromise code hides in a non-compromising function to run when the code is actually used...The case studied by Checkmarx Zero researchers concerns the npm indexed-btree package, which has reached nearly 2 million …
Global Security Mag OnlineGlobal Security Mag OnlineAttackers bypass new npm protections... by moving the malware from installation to execution A new malicious campaign analyzed by Checkmarx Zero shows how attackers adapt to the restrictions introduced by npm on preinstall and postinstall scripts. Malwares / Malware
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
