NPM package hijacking – Threat Note

News

From Security Week – 9-Year-Old NPM Crypto Package Hijacked for Information Theft

[[{“value”:”Nearly a dozen crypto packages on NPM, including one published 9 years ago, have been hijacked to deliver infostealers. The post 9-Year-Old NPM Crypto Package Hijacked for Information Theft appeared first on SecurityWeek.”}]] Read More

shaikh Saqib
March 28, 2025

News

From The Hacker News – Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts

Cybersecurity researchers have discovered several cryptocurrency packages on the npm registry that have been hijacked to siphon sensitive information such as environment variables from compromised systems.
"Some of these packages have lived on npmjs.com for over 9 years, and provide legitimate functionality to blockchain developers," Sonatype researcher Ax Sharma said. "However, [...] the latest

shaikh Saqib
March 28, 2025