A highly automated npm supply chain campaign, dubbed “CanisterWorm,” in which threat actors steal npm access tokens and weaponize legitimate publisher accounts at scale. The group, tracked as “TeamPCP,” has compromised trusted namespaces including @emilgroup and @teale.io, pushing new SDK versions that silently deploy a persistent backdoor and then self-spread across every package the victim […]
The post CanisterWorm Hijacks npm Publisher Accounts, Steals Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Google just launched a new Gemini-powered dark web monitoring service
A new AI-powered dark web monitoring service looks to give enterprises more “reasoned answers” and deeper insights
