A Malicious Package Found Stealing AWS AIM data on npm has Similarities To Capital One Hack
Malicious Packages
Original research and analysis on malicious packages in open source registries โ attack techniques like typosquatting, plus detection and defense.