A new malicious npm package named "ambar-src" has been identified targeting developers through open-source malware. Despite being available for only three days, it was downloaded over 50,000 times. The package uses a preinstall script to execute code during installation and employs several detection evasion techniques. It deploys sophisticated payloads tailored to the host's operating system, potentially leading to full compromise of infected hosts and network pivoting. Tenable Cloud Security can be used to detect the presence of this malicious package in cloud environments.
Read the full article at Security Boulevard
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.
79
Comments
AN
Ali NematiWritten by Ali
