18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments.

One of the packages in question is “lib-mtop,” an unscoped package with the same name as a private Alibaba package

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 28.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 129.225.125.127 — 1560 requests (recent log) 89.167.35.212 — 1083 requests (recent log) 132.226.67.69 — 628 requests (recent

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters Microsoft is alerting of a “high-volume phishing campaign” that’s using invisible Unicode tag characters to bypass email filters.

Show HN: Neobrutalism.dev – just added Base UI support and added new color theme

Show HN: Neobrutalism.dev – just added Base UI support and added new color theme Source: Hacker News