Tag: npm – Securitricks

216.73.216.133

Tag: npm

Attack reports, vulnerabilities, indicators and intrusion sets linked to npm.

Attack reports (40)

"Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack

10 MITREs 1 Malware 1 Observable
Self-replicating Shai-hulud worm spreads token stealing malware on npm

1 Malware
Ethereum smart contracts used to push malicious code on npm

6 MITREs 2 Malwares
PyPI Supply Chain Attack Uncovered: Colorama and Colorizr Name Confusion

7 MITREs 2 Observables
The Good, the Bad and the Ugly in Cybersecurity – Week 20

1 CVE 14 MITREs 1 Malware 1 Observable 1 APT
Atomic and Exodus crypto wallets targeted in malicious npm campaign

1 Observable
Malware found on npm infecting local package with reverse shell

11 MITREs 1 Observable
Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

9 MITREs 1 Malware 1 Observable
A new playground: Malicious campaigns proliferate from VSCode to npm

2 Observables
An NPM and PyPI Malicious Campaign Targeting Windows Users

10 MITREs 2 Malwares 11 Observables 1 APT
Differential analysis raises red flags over @lottiefiles/lottie-player

6 MITREs
Supply Chain Attack Using Ethereum Smart Contracts to Distribute Multi-Platform Malware

11 MITREs 1 Malware 4 Observables

25–36 of 40