Three malicious packages named “solanacore,” “solana-login,” and “walletcore-gen” have been found on the npmjs.com registry targeting Solana crypto developers with Windows malware. Unlike typical crypto-stealer packages, they plainly show their intent to collect keylogging and other sensitive data, rather than attempting to hide their true nature. The packages use Slack web hooks and ImgBB APIs to transfer the collected data to external actors. The packages have been downloaded over 1,900 times.
Labcorp to manage NJ system’s lab operations
Labcorp has entered an agreement to manage Inspira Health’s hospital laboratories in Vineland, Elmer, and Mullica Hill, handling staffing, supply chain services, and technical support.