ScienceThe Hacker Newsabout 6 hours ago
Malicious npm Packages Deliver Windows RAT
1 min read
Researchers discovered malicious npm packages posing as PostCSS tools that deliver a Windows remote access trojan. Published by user "abdrizak," the packages deploy a JavaScript dropper, PowerShell script, and Python loader to execute the RAT. The malware steals Chrome credentials, runs shell commands, and communicates with a C2 server.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
