SecBoard
Zurück zur Übersicht
ManagerRed TeamIT/SaaSNetwork

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

The Hacker News·
Originalartikel lesen bei The Hacker News

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts. "This attack avoids the most common npm execution paths through lifecycle scripts, perhaps...

MITRE ATT&CK Kill Chain (1 Techniken)

Execution
T1059.006

Python

Vollständigen Artikel lesen bei The Hacker News

Verwandte Artikel

OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI

SecurityWeek·vor etwa 3 Stunden

Data breach exposes up to 14.2 million email logins at six ISPs

BleepingComputer·vor etwa 20 Stunden

Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials

The Hacker News·vor 1 Tag

OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards

The Hacker News·vor 2 Tagen

Chinese Framework Powers 200,000 Scam Sites

SecurityWeek·vor 2 Tagen