Widespread npm Supply Chain Attack: Breaking Down Impact & Scope Across Debug, Chalk, and Beyond

A deeper look at the npm debug/chalk supply-chain incident: deobfuscating the wallet-hijacking browser interceptor, quantifying the 2-hour exposure with Wiz telemetry 99% package prevalence, 10% malware presence, and unpacking what made it spread so fast...

Malware in slice-ansi

Any computer that has this package installed or running should be considered affected by a browser-based interceptor that hijacks network traffic and application APIs. The interceptor injects itself into functions related to web traffic and cryptocurrency wallets. The interceptor replaces values...

Malware in ansi-styles

Any computer that has this package installed or running should be considered affected by a browser-based interceptor that hijacks network traffic and application APIs. The interceptor injects itself into functions related to web traffic and cryptocurrency wallets. The interceptor replaces values...

Duplicate Advisory: Malware in is-arrayish

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-frh7-2f84-v9mw. This link is maintained to preserve external references. Original Description Any computer that has this package installed or running should be considered affected by a browser-based interceptor...