Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub
[ad_1] î ‚Jan 23, 2024î „NewsroomSoftware Security / Supply Chain Two malicious packages discovered on the npm package registry have been found to leverage GitHub to store Base64-encrypted SSH keys stolen from developer systems on which they were installed. The modules named warbeast2000 and kodiak2k were published at the start of the month, attracting 412 and 1,281…