Tag: malware

Multiple npm packages impersonating popular package names were published to the npm registry including by a Snyk researcher apparently targeting internal packages at Cursor AI.

Multiple npm packages impersonating popular package names are being used to distribute malware. We take a closer look at the campaign.

Malware hidden in open source library packages are real. In this article, we analyse the malicious npm package llm-oracle.