Mastodawn

Watch out: Fake npm packages are impersonating a popular PostCSS tool to drop a #Windows RAT and steal passwords stored in Chrome.

Listen or Read: https://hackread.com/fake-npm-packages-postcss-tool-steal-chrome-password/

#npm #PostCSS #Cybersecurity #Malware

Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords

JFrog warns of malicious npm packages that mimic PostCSS tooling, drop a Windows RAT, and target Chrome-stored passwords through a staged infection setup route.

Hackread - Cybersecurity News, Data Breaches, AI and More