packages

Fake Arch Linux packages spread malware with root privileges

by
Fake Arch Linux packages spread malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that imitated two popular utility tools, yay and paru. AUR is a community-maintained, widely used package index for Arch Linux and derived distributions that hosts package build scripts (PKGBUILDs) for third-party and proprietary tools, beta versions or older package versions that are no … Read more

Malicious NPM packages bypass the installation script defenses at runtime

by
Malicious NPM packages bypass the installation script defenses at runtime

An ongoing NPM malware campaign using the indexed-btree package shows how threat actors are evading supply chain defenses by hiding malicious code in the normal runtime behavior of a package rather than in installation scripts. The package discovered by Checkmarx researchers attempts to mimic the legitimate sorted-btree library and has already been downloaded 2 million … Read more