Source |
Bleeping Computer |
Identifiant |
8628042 |
Date de publication |
2024-12-20 12:47:54 (vue: 2024-12-20 18:08:07) |
Titre |
Malicious Rspack, Vant packages published using stolen NPM tokens |
Texte |
Three popular npm packages, @rspack/core, @rspack/cli, and Vant, were compromised through stolen npm account tokens, allowing threat actors to publish malicious versions that installed cryptominers. [...]
Three popular npm packages, @rspack/core, @rspack/cli, and Vant, were compromised through stolen npm account tokens, allowing threat actors to publish malicious versions that installed cryptominers. [...] |
Notes |
★★★
|
Envoyé |
Oui |
Condensat |
@rspack/cli @rspack/core account actors allowing compromised cryptominers installed malicious npm packages popular publish published rspack stolen threat three through tokens using vant versions |
Tags |
Threat
|
Stories |
|
Move |
|