CERT24Compromised node-ipc npm package covertly distributed data-stealing malwareLoading data…
CERT24Threat Observatory
Period

Compromised node-ipc npm package covertly distributed data-stealing malware

Attackers injected credential-stealing malware into newly published versions of the node-ipc npm package. The malware collects sensitive data and exfiltrates it through DNS TXT queries.

← Back to intelligence

Compromised node-ipc npm package covertly distributed data-stealing malware

Attackers injected credential-stealing malware into newly published versions of the node-ipc npm package. The malware collects sensitive data and exfiltrates it through DNS TXT queries.