Embedded Malicious Package

Overview @toptal/picasso-utils is a malicious package. through the preinstall and postinstall scripts. A potentially compromised account operating in Toptal's GitHub organization exposed an AWS token, leading to the account being taken over. This allowed the attackers to expose private...

Malicious code in @toptal/picasso-form (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @toptal/davinci-cloudflare-requests-handler (npm)

The package communicates with a domain associated with malicious activity...