These NPM tools are actually just install malware

Audio player loading…

Cybersecurity researchers from Check Point have discovered 16 typosquatted packages on the NPM repository that install cryptocurrency miners.NPM is one of the more popular JavaScript repositories, hosting more than two million open source packages that developers can use to speed up software development. As such, it’s an attractive target for cybercriminals engaging in supply chain attacks. Developers that download malicious packages risk not only their endpoints, but also those that end up using their products. Impersonating a
…
Read more