
40 npm Packages Compromised: A Deep Dive into the Supply Chain Attack Exploiting bundle.js for Credential Theft
Cybersecurity researchers have recently identified a new software supply chain attack targeting the npm registry, impacting over 40 packages maintained by various developers. The compromised versions of these packages include a function named NpmModule.updatePackage. This function downloads a package tarball,




