Npm Malware Uses Invisible Dependencies to Infect Dozens of Packages

The ongoing ‘PhantomRaven’ malicious campaign has infected 126 npm packages to date, representing 86,000 downloads

First seen on infosecurity-magazine.com

Jump to article: www.infosecurity-magazine.com/news/npm-malware-invisible-dependencies/