03-25-2024, 06:02 AM
Over 800 npm Packages Found with Discrepancies, 18 Exploitable to 'Manifest Confusio
New research has discovered over 800 packages in the npm registry which have discrepancies from their registry entries, out of which 18 have been found to exploit a technique called manifest confusion.
The findings come from cybersecurity firm JFrog, which said the issue could be exploited by threat actors to trick developers into running malicious code.
"It's an actual threat since
https://thehackernews.com/2024/03/over-8...-with.html
New research has discovered over 800 packages in the npm registry which have discrepancies from their registry entries, out of which 18 have been found to exploit a technique called manifest confusion.
The findings come from cybersecurity firm JFrog, which said the issue could be exploited by threat actors to trick developers into running malicious code.
"It's an actual threat since
https://thehackernews.com/2024/03/over-8...-with.html