New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally – The Hacker News
Cybersecurity researchers have flagged a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware. The malware, introduced via a change to “lib/commonjs/index.js,” allows an attacker…