Articles for tag: cryptocurrency mining, Malware, npm security, package management, Rspack, software vulnerabilities, supply chain attack

December 20, 2024

Rspack npm Packages Compromised: Crypto Mining Malware Discovered in Supply Chain Attack – Stay Informed and Protect Your Projects

On December 20, 2024, the developers of Rspack disclosed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a supply chain attack. Malicious versions containing cryptocurrency mining malware were published to the npm registry after an attacker gained unauthorized publishing access. The affected versions, 1.1.7, have been removed, with 1.1.8 now considered ...

November 28, 2024

Market News

Crypto

XMLRPC NPM Library Compromised: Data Theft and Crypto Mining Attacks Exposed

Cybersecurity researchers have revealed a year-long software supply chain attack on the npm package registry, initiated by the seemingly harmless library @0xengine/xmlrpc. This package, which originally functioned as a JavaScript XML-RPC server for Node.js, was compromised shortly after its launch to include malicious code capable of stealing sensitive information and mining cryptocurrency. The malicious features ...