Malicious npm packages evade install-script defenses at runtime
An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than in installation scripts. [...]
Se muestra el contenido original; la traduccion localizada aun no esta disponible.
Qué ocurrió
An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than in installation scripts. [...]
Por que importa
The development may change operating conditions or market expectations around Security. Further confirmation and measurable outcomes matter.
Entidades afectadas
Ver evidencia
1 articulos · 1 informe original · 1 independientes
- BleepingComputerFuente primaria · Respalda · EN · 100%Malicious npm packages evade install-script defenses at runtime ↗
Afirmaciones
- Malicious npm packages evade install-script defenses at runtime Observado
Conflictos
No se detectaron conflictos importantes en la evidencia disponible.
Cronología
- Primera publicación
Movimiento del mercado posterior al evento
La reacción del mercado aún no está disponible para este activo y periodo.