Two malicious npm packages, express-api-sync and system-health-sync-api, have been discovered, posing a significant threat to production systems. Published under the npm alias “botsailer,” the packages install backdoors capable of deleting all files within an application. Unlike typical malware, these tools prioritise data destruction over theft, highlighting a growth in software supply chain threats. Socket’s Threat Research Team urges developers to use behavioural scanning tools to detect such threats.
Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR – Help Net Security
Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR Help Net Security
