A threat actor published backdoored versions of 17 NPM packages from GlueStack in a fresh supply chain attack.

Supply chain attack infects 16 GlueStack npm packages used by 1M weekly users, enabling malware that steals data and controls ...

NPM packages with more than a million weekly downloads were compromised to deliver a RAT The attack could turn into a major ...