Articles for tag: cryptocurrency mining, malicious code injection, Python Package Index, security vulnerabilities, software supply chain, Ultralytics, user awareness

XMLRPC NPM Library Compromised: Data Theft and Crypto Mining Attacks Exposed

Cybersecurity researchers have revealed a year-long software supply chain attack on the npm package registry, initiated by the seemingly harmless library @0xengine/xmlrpc. This package, which originally functioned as a JavaScript XML-RPC server for Node.js, was compromised shortly after its launch to include malicious code capable of stealing sensitive information and mining cryptocurrency. The malicious features ...