If you're using this hijacked NPM library anywhere in your software stack, read this

Unknown October 25, 2021 0

US govt issues alert over JS package downloaded 8m times a week – plus more news from world of infosec

In brief The US government's Cybersecurity and Infrastructure Security Agency (CISA) has warned developers that a version of the ua-parser-js JavaScript library, available via NPM, was infected with data-stealing and cryptocurrency-mining malware.…

from The Register

No comments

Subscribe to: Post Comments ( Atom )