În afara temei aiqbench
Această știre a fost preluată de la o sursă pe care o urmărim, dar nu ține de domeniul AI sau cuantic, așa că nu există o perspectivă aiqbench pentru ea.
Malicious npm Package With 2 Million Downloads Hides Malware in Runtime Code
A malicious npm package that appeared to be an ordinary data-indexing tool has exposed a weakness in software supply-chain defenses. The package, indexed-btree, copied the identity of the legitimate sorted-btree library and recorded almost two million weekly downloads. The campaign is notable because the malware does not need to run while a developer installs it. […] The post Malicious npm Package With 2 Million Downloads Hides Malware in Runtime Code appeared first on Cyber Security News.
A malicious npm package that appeared to be an ordinary data-indexing tool has exposed a weakness in software supply-chain defenses. The package, indexed-btree, copied the identity of the legitimate sorted-btree library and recorded almost two million weekly downloads. The campaign is notable because the malware does not need to run while a developer installs it. Instead, it waits inside normal application code and activates when the library is used, turning a trusted…
Extras afișat conform termenilor RSS ai publicației · 72 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
Closing the Binary Blind Spot: Domain-Knowledge Injection for LLM Malware Triage in npm Packages
Databricks · 16 oct. 2026
AgentBaiting Campaign Uses 800 Fake AI Skills and MCP Servers to Deliver SmartLoader Malware
Cybersecurity News · 21 iul. 2026
MALFEX npm Malware Hides Executables in PNG Files to Infect Windows Developers
Cybersecurity News · 8 oct. 2026
14 Fake macOS Installers Linked to DPRK Campaign Deliver Credential-Stealing RAT
Cybersecurity News · 4 sept. 2026