În afara temei aiqbench
Această știre a fost preluată de la o sursă pe care o urmărim, dar nu ține de domeniul AI sau cuantic, așa că nu există o perspectivă aiqbench pentru ea.
Popular npm Package With 150K+ Weekly Downloads Hit by Credential-Stealing Supply-Chain Worm
A widely used npm package has become a credential-stealing delivery channel after attackers planted a self-spreading Shai-Hulud payload in its releases. The affected @7nohe/openapi-react-query-codegen package, which generates TanStack Query code, receives more than 150,000 weekly downloads. The malicious releases can run while a developer installs dependencies or when npm processes a specially crafted build configuration file. That […] The post Popular npm Package With 150K+ Weekly Downloads Hit by Credential-Stealing Supply-Chain Worm appeared first on Cyber Security News.
A widely used npm package has become a credential-stealing delivery channel after attackers planted a self-spreading Shai-Hulud payload in its releases. The affected @7nohe/openapi-react-query-codegen package, which generates TanStack Query code, receives more than 150,000 weekly downloads. The malicious releases can run while a developer installs dependencies or when npm processes a specially crafted build configuration file. That gives the malware an opening on workstations and automated build runners, where publishing, cloud, and source-code credentials are often available.…
Extras afișat conform termenilor RSS ai publicației · 77 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
Links #5: 2026/07
LessWrong · 31 iul. 2026
Keyv npm Package with 127M Weekly Downloads Compromised in Shai-Hulud Attack
Cybersecurity News · 4 aug. 2026
Popular npm Package With 150K Weekly Downloads Compromised in Mini Shai-Hulud Supply-Chain Attack
Cybersecurity News · 1 sept. 2026
Hackers Compromised 140+ Mastra npm Packages to Deploy Password-Stealing Malware
Cybersecurity News · 17 iun. 2026