NPM package caught using QR Code to fetch cookie-stealing malware
Newly discovered npm package 'fezbox' employs QR codes to hide
a second-stage payload to steal cookies from a user's web browser.
The package, masquerading as a utility library, leverages this
innovative steganographic technique to harvest sensitive data, such
as user credentials, from a compromised machine. [...]
Pensée du jour :
Ce que l'homme a fait ,
l'homme peut le défaire.
"No secure path in the world"
