Skip to content
Threat Feed

Product

Node-Ipc

1 brief RSS
high advisory

Compromised node-ipc npm Package Steals Credentials

Hackers injected credential-stealing malware into newly published versions of the node-ipc npm package in a supply chain attack, collecting cloud credentials, SSH keys, CI/CD secrets, and other sensitive data, exfiltrating it through DNS TXT queries.

node-ipc +10 supply-chain-attack npm infostealer credential-theft
2r 3t 2i