Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories – The Hacker News
Cybersecurity researchers have discovered a malicious npm package named “@acitons/artifact” that typosquats the legitimate “@actions/artifact” package with the intent to target GitHub-owned repositories. “We think the intent was to have…