Npm Package Hides Malware in Steganographic QR Codes
from DarkReading 24 September indexed on 24 September 2025 20:02The poisoned package, purporting to be a JavaScript utility, threatens the software supply chain with a highly obsfuscated credential stealer.
Read more.
