Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack,
The developers of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware.
Following the discovery, versions 1.1.7 of both libraries have been unpublished from the npm registry. The latest
Following the discovery, versions 1.1.7 of both libraries have been unpublished from the npm registry. The latest
,
The developers of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware.
Following the discovery, versions 1.1.7 of both libraries have been unpublished from the npm registry. The latest
Following the discovery, versions 1.1.7 of both libraries have been unpublished from the npm registry. The latest
, ,
https://thehackernews.com/2024/12/rspack-npm-packages-compromised-with.html