Malicious NPM Packages Exploit Ethereum Wallets with Obfuscated JavaScript

Malicious NPM Packages Exploit Ethereum Wallets with Obfuscated JavaScript

A recent wave of malicious NPM packages has emerged as a significant threat to cryptocurrency users, specifically targeting Ethereum wallet holders. Cybersecurity researchers have uncovered a sophisticated campaign where attackers leverage the widely-used Node Package Manager (NPM) ecosystem to distribute harmful code disguised as legitimate libraries. This attack vector exploits the trust developers place in […] Introduction to Malware Binary …

Threats surge in supply chains

Kaspersky has reported a sharp rise in malicious open-source packages as supply chain threats grow, writes SHERYL GOLDSTUCK. The post Threats surge in supply chains appeared first on Gadget.

Malicious packages are threatening software supply chains

Kaspersky’s Global Research and Analysis Team experts reported that by the end of 2024 a total of 14,000 malicious packages were found in open-source projects, a 48% increase compared to the end of 2023. 42 million versions of open-source packages have been examined by Kaspersky throughout 2024 in search for vulnerabilities. Open-source is software with source code that anyone can inspect, modify, and enhance. Popular open-source packages includ…