npm Pulls Malicious Package that Stole Login Passwords

guest · Aug 21, 2019

npm Pulls Malicious Package that Stole Login Passwords
August 21, 2019
https://www.bleepingcomputer.com/ne...malicious-package-that-stole-login-passwords/

Critical severity
Earlier today, npm pulled the package 'bb-builder' from the repository, marking it as malicious and having critical severity.

The advisory warns that computers that had this package installed or running should be considered "fully compromised" because it deployed an executable for Windows operating system that sent sensitive information to a remote server.
"All secrets and keys stored on that computer should be rotated immediately from a different computer," npm advises.

However, 'bb-builder' was not a popular choice, as its installation statistics show few weekly downloads. The most active period was between June 19-25 when the number downloads peaked at 78.

"The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it." - npm
Click to expand...

Log in or Sign up

npm Pulls Malicious Package that Stole Login Passwords

guest Guest

Log in or Sign up

npm Pulls Malicious Package that Stole Login Passwords

guest Guest

Useful Searches