Cybersecurity researchers at Phylum reported on October 31 that a threat actor uploaded hundreds of malicious packages to npm, an open source repository used in JavaScript development. The malicious ...

The aim is to infect the systems of developers who rely on these registries for their code. To hide their malicious intent, ...

Phylum noted that some unknown miscreant was using typosquat packages masquerading as Puppeteer, Bignum.js and various cryptocurrency libraries – 287 packages in total – to trick developers into ...