The Hacker News - Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor
Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private keys and gain remote access to the machine via the secure shell (SSH) protocol. The packages attempt to "gain SSH access to the victim's machine by writing the attacker’s SSH public key in the root user’s authorized_keys file," software supply
from The Hacker News https://thehackernews.com/2024/10/malicious-npm-packages-target.html
from The Hacker News https://thehackernews.com/2024/10/malicious-npm-packages-target.html
Comments
Post a Comment