⤷ Title: Major npm Supply Chain Attack: Phishing Campaign Steals Maintainer Credentials, Injects Malware into Popular Packages
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 19 Jul 2025 02:38:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #eslint #malware #npm #phishing #Prettier #supply chain attack #synckit #Typosquatting
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 19 Jul 2025 02:38:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #eslint #malware #npm #phishing #Prettier #supply chain attack #synckit #Typosquatting
Daily CyberSecurity
Major npm Supply Chain Attack: Phishing Campaign Steals Maintainer Credentials, Injects Malware into Popular Packages
A sophisticated phishing campaign using a typosquatting domain (npnjs.com) stole an npm maintainer's credentials, injecting malware into popular packages like eslint-config-prettier and synckit.
⤷ Title: npm Supply Chain Attack Exploited in the Wild – Phishing Steals Maintainer Tokens, Injects Malware into Popular Packages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 23:39:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Eslint #malware #npm #phishing #PoC #Prettier #remote code execution #supply chain attack #Synckit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 23:39:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Eslint #malware #npm #phishing #PoC #Prettier #remote code execution #supply chain attack #Synckit
Penetration Testing Tools
npm Supply Chain Attack Exploited in the Wild – Phishing Steals Maintainer Tokens, Injects Malware into Popular Packages
A phishing campaign stole npm maintainer tokens, leading to trojanized versions of eslint-config-prettier, synckit, and other packages, enabling remote code execution on Windows systems.