Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram bot library but harbor SSH backdoors and data exfiltration capabilities. The packages in question are listed below - node-telegram-utils (132 downloads) node-telegram-bots-api (82 downloads) node-telegram-util (73 downloads) According to supply chain
source https://thehackernews.com/2025/04/rogue-npm-packages-mimic-telegram-bot.html
Saturday, April 19, 2025
Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box