A new supply chain attack against the NPM repository is using novel, self-propagating malware (also known as a worm) to continue spreading itself.
    • dotslashme@infosec.pubEnglish
      10·
      3 months ago

      Honestly, I’m surprised it has taken them this long to develop a proper worm, considering how everything ties into everything else.

      It’s for sure the next logical step.

  • KissakiEnglish
    1·
    3 months ago

    CrowdStrike is a global cybersecurity leader with an advanced cloud-native platform for protecting endpoints, cloud workloads, identities and data.

    At the time of this writing, approximately 200 infected packages have been identified, including several repositories such as the popular @ctrl/tinycolor and multiple owned by CrowdStrike.

    Oops 🫠