Source: thehackernews.com – Author: .
Threat actors are continuing to upload malicious packages to the npm registry so as to tamper with already-installed local versions of legitimate libraries and execute malicious code in what’s seen as a sneakier attempt to stage a software supply chain attack.
The newly discovered package, named pdf-to-office, masquerades as a utility for converting PDF files to Microsoft Word documents. But, in
Original Post url: https://thehackernews.com/2025/04/malicious-npm-package-targets-atomic.html
Category & Tags: –
Views: 2
