New npm Malware Campaign Verifies if the Visitor is a Victim or a Researcher Before Triggering Infection

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New npm Malware Campaign Targets Visitors Based on Their Role A new malware campaign targeting npm users has been identified, which checks if a visitor is a victim or a researcher before initiating the infection process. This sophisticated approach aims to maximize the effectiveness of the attack while minimizing exposure to security researchers. The campaign highlights the evolving tactics used by cybercriminals in the npm ecosystem. 2 sources 31