Despite best efforts to track software dependencies, blind spots still exist leading to silent vulnerabilities in software.

Reversing Labs reached out to the npm security team on July 2 about the problem presented by the packages in question

A widely used repository is infected with hidden malware

Password-stealing package outed by security firm evokes sense of déjà vu

Abusing Google ChromePass Utility

Researchers at ReversingLabs have disclosed their findings on two malicious NPM packages that secretly steal passwords from your Chrome web browser