Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a crossplatform remote access trojan RAT as part of a sophisticated, targeted software supply chain attack targeting Chinesespeaking environments. One of the packages in question is "libmtop," an unscoped package with the same name as a private Alibaba package.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity