Mmastodon TechnologyCybersecurity first seen 12 h ago, last 12 h ago, peak #6

DirtyBlanket Linux Worm Spreads Through Malicious npm Packages

Original: (safedep.io) DirtyBlanket: Self-Spreading Linux Worm Distributed via Malicious npm Packages Targeting Developers In brie

Security researchers at SafeDep report a self-spreading Linux worm, dubbed DirtyBlanket, distributed through nine malicious npm packages impersonating popular libraries such as Express and React. Once installed, the malware targets developers' Linux machines and propagates further, making supply-chain attacks on the JavaScript ecosystem a renewed concern for developers reviewing dependencies.

Why now: Newly disclosed self-propagating malware in widely used npm packages alarms developers who rely on those libraries daily.

SafeDepDirtyBlanketnpmLinuxExpress

Open on mastodon →

Evidence

• (safedep.io) DirtyBlanket: Self-Spreading Linux Worm Distributed via Malicious npm Packages Targeting Developers In brief - This article describes a self-spreading Linux worm distributed via nine malicious npm packages that impersonate popular libraries like Express and React.… · orlysec@swecyb.com · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/349417