npm malware
@npm_malware
📣 We tweet malicious packages detected on npm in real-time. 🚨 Not affiliated with @npmjs or @github. 🛡 Powered by the @SocketSecurity threat feed. ✨
ID: 1564754411540316161
https://socket.dev 30-08-2022 23:18:46
6,6K Tweet
1,1K Followers
11 Following
⚠️ New threat detected: [email protected] ⚠️ This file contains an obfuscated backdoor that executes a fetch() POST to https://api[.]telegram[.]org/bot8040141601:AAHhDd5DXTE9OHupVlm0NMqKSjtaSaovcNE/sendMessage with Content-Type application/json. The re... socket.dev/npm/package/ba…