Npm packages from Rspack, Vant compromised, blocked by Sonatype

Malware News
1

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

npm packages from Rspack, Vant compromised, blocked by Sonatype

Fairly popular npm packages, @rspack/core and @rspack/cli were hijacked yesterday after attackers got their hands on a compromised npm token and published malicious versions 1.1.7 of these projects. These versions were promptly caught by Sonatype's automated malware detection systems and blocked for our customers using Nexus Repository Firewall.

Article Link: npm packages from Rspack, Vant compromised, blocked by Sonatype