2 ms·
What exactly is the malicious code? I assume it's in `compile.js` and only can be found in published (now removed) npm package instead of source code repo?
by thrdbndndn 5y ago
What exactly is the malicious code? I assume it's in `compile.js` and only can be found in published (now removed) npm package instead of source code repo?
- perihelions 5y agoThere's some details here: https://www.bleepingcomputer.com/news/security/popular-coa-npm-library-hijacked-to-steal-user-passwords/ https://www.bleepingcomputer.com/news/security/popular-coa-n... >"Based on our analysis and information seen thus far, the malware is likely the Danabot password-stealing Trojan for Windows."