For the past four months, over 130 malicious NPM packages deploying information stealers have been collectively downloaded ...
Supply chain security company Safety has discovered a trojan in NPM that masqueraded as Anthropic’s popular Claude Code AI ...
The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...
The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback