Uncover the year-long NPM supply chain attack involving the malicious @0xengine/xmlrpc package. Learn how it combined cryptocurrency mining with data theft.
malicious npm package
ReversingLabs researchers have uncovered a malicious package named "legacyreact-aws-s3-typescript" on the npm registry
In a startling discovery, the Phylum Research Team has exposed a malicious npm package masquerading as a legitimate toolkit