Discord-Stealing Malware Invades npm Packages

By threatpost - 2021-01-24

Description

The CursedGrabber malware has infiltrated the open-source software code repository.

Summary

  • Subscribe to our Threatpost Today newsletter Join thousands of people who receive the latest breaking cybersecurity news every day.
  • The packages (named an0n-chat-lib, discord-fix and sonatype, all published by “scp173-deleted”) have been taken down, though it’s unknown how many developers used them before they were removed.
  • Sponsored content is written and edited by members of our sponsor community.
  • This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience.

 

Topics

  1. Security (0.25)
  2. UX (0.19)
  3. Backend (0.16)

Similar Articles