TECH NEWS
Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords
Cybersecurity research firm JFrog reveals a new technique in its latest report that cybercriminals are using to target software developers, tricking them into downloading remote access trojans (RATs). This operation relies on an attack method called package impersonation, in which malicious packages are uploaded as trusted utilities to attract developers.