Attackers are hiding malware in minified packages distributed to NPM

1. steal-ur-stuff

   1 8 23 0.0

   Steal Ur Stuff

   

   Whenever something like this comes up I usually have to tap the sign (and the original report)

2. CodeRabbit

   coderabbit.ai featured

   CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

   

3. npm

   2 52 17,233 2.1 JavaScript

   Whenever something like this comes up I usually have to tap the sign (and the original report)

4. cli

   3 12 102 9.1 Rust

   Command line interface for the Phylum API (by phylum-dev)

   

   We open sourced our tooling to help with this problem specifically. We have an extension framework that wraps npm for three purposes:

5. birdcage

   4 13 185 4.3 Rust

   Cross-platform embeddable sandboxing

   

   The sandbox is also open source and available for use by the community.

Suggest a related project