Malicious node-ipc Versions Target Cloud, AI Tool Credentials via Supply Chain Backdoor
Three versions of the widely-used node-ipc npm package were found to contain obfuscated stealer/backdoor payloads published by an unauthorised maintainer account. The malware harvests 90 categories of …
AML.T0010 - ML Supply Chain Compromise
AML.T0012 - Valid Accounts
AML.T0057 - LLM Data Leakage