Malicious Actor Publishes Compromised NPM Packages in Supply Chain Attack
Malware&ThreatsSupplyChainSecuritybackdoorNPMSupplyChain
A malicious actor has published compromised versions of 17 NPM packages from GlueStack in a new supply chain attack. The affected packages are related to React Native Aria. This attack targets users of these packages, potentially injecting malicious code or stealing sensitive information. The article does not mention specific technical details of the compromise.