Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

Popular npm Package With 150K Weekly Downloads Compromised in Mini Shai-Hulud Supply-Chain Attack

Cybersecurity NewsSeptember 1, 20264 min read

A JavaScript development package has been caught in a supply-chain compromise that can run malicious code when installed. The incident affects a tool with about 150,000 weekly downloads, risking developer and automated build systems. Attackers published ten tainted releases on August 28 in two bursts. They covered every maintained version line, and a routine dependency […] The post Popular npm Package With 150K Weekly Downloads Compromised in Mini Shai-Hulud Supply-Chain Attack appeared first on Cyber Security News.

A JavaScript development package has been caught in a supply-chain compromise that can run malicious code when installed. The incident affects a tool with about 150,000 weekly downloads, risking developer and automated build systems. Attackers published ten tainted releases on August 28 in two bursts. They covered every maintained version line, and a routine dependency update could become an entry point for credential theft. The malicious code runs during installation through build configuration…

Excerpt shown under the publisher's RSS terms · 73 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article