A malicious package bb-builder has been detected in the NPM repository. NPM release 6.11
NPM repository administrators have blocked the bb-builder package, which contained a malicious insertion. The malicious package had gone unnoticed since last August. Over the course of a year, the attackers managed to release 7 new versions, which were downloaded around 200 times. During the package installation, an executable file for Windows was launched, transmitting confidential information to an external host. Users who installed the package are advised to urgently change all existing […]
