Cyber Due Diligence, Fraud Investigation Techniques

Malicious NPM Packages Disguised With ‘Invisible’ Dependencies

Invisibleman Scottmacmillan Alamy Vkupbk

In the “PhantomRaven” campaign, threat actors published 126 malicious npm packages that have flown under the radar, while collecting 86,000 downloads.

Leave a Reply

Your email address will not be published. Required fields are marked *