#NPM: Two malicious packages were discovered on npm (#NodeJS package manager) that covertly patch legitimate, locally installed packages to inject a persistent reverse shell backdoor:
#SoftwareSupplyChainSecurity
👇
https://www.bleepingcomputer.com/news/security/new-npm-attack-poisons-local-packages-with-backdoors/
Sam Stepanyan :verified: 🐘 /
npub18d…rltg5
2025-03-27 01:02:21
Author Public Key
npub18d0arwv295u03fd825dvn5eharfx25rtrkemffxnar9dzn82drtssrltg5Published at
2025-03-27 01:02:21Event JSON
{
"id": "993dc8e751e403440615a171cc26a49029a21a12f1400ee829abc33e9d0de0db",
"pubkey": "3b5fd1b98a2d38f8a5a7551ac9d337e8d265506b1db3b4a4d3e8cad14cea68d7",
"created_at": 1743037341,
"kind": 1,
"tags": [
[
"t",
"npm"
],
[
"t",
"nodejs"
],
[
"t",
"SoftwareSupplyChainSecurity"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/114231695191289731",
"activitypub"
]
],
"content": "#NPM: Two malicious packages were discovered on npm (#NodeJS package manager) that covertly patch legitimate, locally installed packages to inject a persistent reverse shell backdoor:\n#SoftwareSupplyChainSecurity\n👇\nhttps://www.bleepingcomputer.com/news/security/new-npm-attack-poisons-local-packages-with-backdoors/",
"sig": "579480a68e55ec193340ed75818e8c76eac4ab35040821277d9925753d7237087807bec52f792063e901e447c2cfaecfb86fac332827337a3c39ce33eeccdc1a"
}