Dangerous npm packages target developer credentials on Windows, Linux and Mac – here’s what we know
Ten typosquatted npm packages delivered info-stealing malware to nearly 10,000 systems Malware-targeted system keychains that bypass app-level security to steal decrypted credentials Affected users must revoke credentials, rebuild systems, and enable multi-factor authentication Nearly a dozen malicious npm packages that deliver dangerous info-stealing malware were downloaded about 10,000 times before they were detected and removed. […]









