#npm-package-compromise

[ follow ]
#supply-chain-attack #cloud-security #credential-theft #github-token-exploitation #openclaw #agentic-ai
#supply-chain-attack
Information security
fromThe Hacker News
13 hours ago

UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours

UNC6426 exploited stolen GitHub tokens from the nx npm supply chain compromise to completely breach a victim's cloud environment and exfiltrate data within 72 hours.
fromInfoWorld
2 weeks ago
Information security

Compromised npm package silently installs OpenClaw on developer machines

A compromised npm token caused the Cline CLI to install OpenClaw via a malicious postinstall script, exposing users to an agent with broad system access.
Information security
fromThe Hacker News
13 hours ago

UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours

UNC6426 exploited stolen GitHub tokens from the nx npm supply chain compromise to completely breach a victim's cloud environment and exfiltrate data within 72 hours.
more#supply-chain-attack
[ Load more ]