Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users
Cybersecurity researchers have uncovered a new suspicious package uploaded to the npm package registry that's designed to drop a remote access trojan (RAT) on compromised systems.
The package in question is glup-debugger-log, which targets users of the gulp toolkit by masquerading as a "logger for gulp and gulp plugins." It has been downloaded 175 times to date.
Software supply chain security
Source: Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users (https://thehackernews.com/2024/06/researchers-uncover-rat-dropping-npm.html)