Malicious node-ipc npm Packages Trigger New Supply Chain Security Alarm
Researchers found malicious node-ipc tarballs containing a credential stealer that exfiltrated sensitive developer data via DNS TXT queries.
Researchers found malicious node-ipc tarballs containing a credential stealer that exfiltrated sensitive developer data via DNS TXT queries.
When users typed the wrongly spelt names of websites on their browsers, they were directed to the malicious websites.
© 2026 The Cyber Express - Cybersecurity News and Magazine.
© 2026 The Cyber Express - Cybersecurity News and Magazine.