XML-RPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner
The software supply chain assault, which began as a harmless library and eventually included malicious code to steal private data and mine bitcoin on compromised devices, has been active for more than a year on the npm package registry, according to cybersecurity researchers.
The package, called @0xengine/xmlrpc, was first released on October 2, 2023, as a Node.js XML-RPC server and client based on JavaScript. It is still accessible for download from the repository and has been downloaded 1,790 times so far.
The malicious code was purposefully added to version 1.3.4 a day later, according to Checkmarx, which found the package. It had the ability to collect important read more about XML-RPC npm Library Turns Malicious Steals Data and Deploys Crypto Miner.
Get up to date on the lat...