The coordinated campaign has so far published as many as 46,484 packages, according to SourceCodeRED security researcher Paul ...

A threat actor has published tens of thousands of malicious NPM packages that contain a self-replicating worm, security researchers warn.

In the new campaign, Gootloader was most likely leveraged by a group known as Storm-0494, as well as its downstream operator, ...