Topic

#developer credentials

2 articles found

Malicious npm Packages Target Developers: Protect Your Credentials

Security researchers at JFrog have identified a set of malicious npm packages linked to North Korean threat actors that impersonate legitimate Rollup polyfill tooling to steal developer credentials and enable remote access to compromised machines. The packages, named “rollup-packages-polyfill-core”

#malicious npm packages#developer credentials#cybersecurity threats#india tech ecosystem#software supply chain

· · The Hacker News

North Korean Hackers Exploit npm to Target Developer Credentials

Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. According to JFrog, the packages "rollup-packages-polyfill-core" and "rollup-runtime-polyfill-core" mimic the legiti

#npm security#north korea hackers#developer credentials#malicious packages#india tech security