NPM users warned dozens of malicious packages aim to steal host
May 26, 2025
3 min read
●
TechRadar

Socket found 60 malicious NPM packages. Malware spoofed legitimate packages and was capable of exfiltrating sensitive data. Those who have downloaded any of these are advised to remove them immediately.