CERT24Attackers abused npm trusted publishing to distribute a malicious packageLoading data…
CERT24Threat Observatory
Period

Attackers abused npm trusted publishing to distribute a malicious package

Attackers abused npm trusted publishing in a supply-chain attack to distribute the previously unreported GHAPPIER loader in a malicious release of a legitimate package. Package version 0.2.21 remained the latest version for 35 minutes and 38 seconds.

← Back to intelligence

Attackers abused npm trusted publishing to distribute a malicious package

Attackers abused npm trusted publishing in a supply-chain attack to distribute the previously unreported GHAPPIER loader in a malicious release of a legitimate package. Package version 0.2.21 remained the latest version for 35 minutes and 38 seconds.