Supply chain security company Safety has discovered a trojan in NPM that masqueraded as Anthropic’s popular Claude Code AI ...
The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...
Looking to unlock deeper data-driven insights or to build more intelligent business process automations? These popular tools ...
The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to ...
Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback