International law enforcement agencies warn of a new wave of malicious npm packages distributed by the North Korean threat actor WaterPlum. Developers must remain vigilant against attempts to slip malicious code into open-source repositories, which can lead to supply-chain compromise of build environments and applications.
READ THE ORIGINAL ARTICLE AT SECURITY.NL →