Follow the latest coverage, related explainers and connected technology stories.
Checkmarx identified the MALFEX software supply chain campaign, ongoing since August 2023, which involved publishing 12 packages on NPM, eight of them malicious, with three packages remaining installable as of October 1. The campaign primarily targets Windows users with the Overlord RAT and an information stealer that extracts data from browsers, Discord, and cryptocurrency wallets.