Threat actors have compromised legitimate MemTensor packages on npm and PyPI to distribute a cross-platform Go-based credential stealer named sckit targeting Windows, Linux, and macOS. Developers using these dependencies should immediately audit their environments and remove the affected versions.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →