Mise à jour
Mise à jour de la base de données, veuillez patienter...
Researchers Uncover Malicious NPM Packages Stealing Data from Apps and Web Forms
mardi 5 juillet 2022 à 16:12
A widespread software supply chain attack has targeted the NPM package manager at least since December 2021 with rogue modules designed to steal data entered in forms by users on websites that include them.
The coordinated attack, dubbed IconBurst by ReversingLabs, involves no fewer than two dozen NPM packages that include obfuscated JavaScript, which comes with malicious code to harvest
