
Ongoing Campaign Uses 60 NPM Packages to Steal Data
Malware&ThreatsSupplyChainSecurityinfo-stealerNPMopen-sourceSocket
Security company Socket has reported a campaign targeting NPM users with around sixty malicious packages capable of hijacking system information. This ongoing campaign uses NPM packages to steal data. Specific technical details include the use of 60 malicious NPM packages to compromise users' systems. The described impact is the theft of system data.