Cybersecurity researchers have flagged a malicious npm package that was generated using artificial intelligence (AI) and concealed a cryptocurrency wallet drainer. The package, @kodane/patch-manager, claims to offer "advanced license validation and registry optimization utilities for high-performance Node.js applications." It was uploaded to npm by a user named "Kodane" on July 28, 2025. The
source https://thehackernews.com/2025/08/ai-generated-malicious-npm-package.html
Friday, August 1, 2025
AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box