Read more https://thehackernews.com/2025/07/malware-injected-into-6-npm-packages.html
Malware Injected into 7 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack
that has targeted popular npm packages via a phishing campaign
designed to steal the project maintainers' npm tokens. The captured
tokens were then used to publish malicious versions of the packages
directly to the registry without any source code commits or pull
requests on their respective GitHub repositories. The list of
affected
Pensée du jour :
Ce que l'homme a fait ,
l'homme peut le défaire.
"No secure path in the world"
