Threat actors are abusing legitimate NPM infrastructure in a new phishing campaign that breaks from the typical supply chain attack pattern.
A worm-like campaign named Shai-Hulud has been flagged, targeting widely used packages and propagating itself by harvesting secrets and inserting backdoors. It operates across npm accounts, installing ...
Dr. Matthias Kirschenhofer, former CEO of German sports media firm Sport1 Medien AG, warns about unintended consequences.