Malicious npm Packages Uncovered with Hidden Backdoors
1. Two npm packages concealed backdoor code to execute remote commands.
2. Malicious packages downloaded 190 and 48 times before takedown by npm security.
3. Backdoor functionality hidden in image files executed during package installation.
4. Packages impersonated legitimate aws-s3-object-multipart-copy library.
5. Code extracted malicious content from Microsoft logo to execute commands.
#cybersecurity
#npmpackages
#malware
#backdoor
#opensourcesecurity
#softwaresupplychain
  #commandandcontrol
#phylumsecurity
#packageregistry
#javascriptmalware
#sophisticatedattacks
#maliciouscode
#cyberthreat
#securitybreach
#npmsecurity
#cyberattack
#malwareanalysis
#threatdetection
#remotecommands
#maliciouspackages
#securityawareness
#supplychainattack
#infosec
#softwaresecurity
#phishing
#c2server
#dataexfiltration
#vulnerability
#opensource
#threatintelligence