Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

According to Checkmarx, malicious packages in a long-running NPM supply-chain campaign have been downloaded more than 40,000 times. The campaign, dubbed MALFEX, has been active since August 2023 and distributes malware including the Overlord RAT and infostealers.