comparemela.com

Latest Breaking News On - Supply chain security - Page 10 : comparemela.com

Taiwan Probes Firms Suspected of Selling Chip Equipment to China s Huawei Despite US Sanctions

Dealing with Australia s digital trade dilemma

Typosquatting campaign delivers r77 rootkit via npm

ReversingLabs researchers have identified a new, malicious supply chain attack affecting the npm platform. The “typosquatting” campaign first appeared in August and pushed a malicious package, node-hide-console-windows, which downloaded a Discord bot that facilitated the planting of an open source rootkit, r77. This is the first time ReversingLabs researchers have discovered a malicious open source package delivering rootkit functionality, and suggests that open source projects may increasingly be seen as an avenue by which to distribute malware. 

© 2024 Vimarsana

vimarsana © 2020. All Rights Reserved.