News and Notes from the Makers of Nexus | Sonatype Blog | Ax Sharma

Posts by Ax Sharma

[Revived CryptoJS Library Is a Crypto Stealer in Disguise](/content/blog/revived-cryptojs-library-is-a-crypto-stealer-in-disguise "Internal link to Revived CryptoJS Library Is a Crypto Stealer in Disguise resource"/index.html)

[Multiple Crypto Packages Hijacked, Turned Into Info-Stealers](/content/blog/multiple-crypto-packages-hijacked-turned-into-info-stealers "Internal link to Multiple Crypto Packages Hijacked, Turned Into Info-Stealers resource"/index.html)

[Fake VS Code Extension on npm Uses Altered ScreenConnect Utility as Spyware](/content/blog/fake-vs-code-extension-on-npm-uses-altered-screenconnect-utility-as-spyware "Internal link to Fake VS Code Extension on npm Uses Altered ScreenConnect Utility as Spyware resource"/index.html)

[Fake Solana Packages Target Crypto Devs, Abuse Slack and ImgBB for Data Theft](/content/blog/npm-packages-target-solana-devs-drop-keylogging-trojans "Internal link to Fake Solana Packages Target Crypto Devs, Abuse Slack and ImgBB for Data Theft resource"/index.html)

[npm Packages From rspack, vant Compromised, Blocked by Sonatype](/content/blog/npm-packages-rspack-vant-compromised-blocked-by-sonatype "Internal link to npm Packages From rspack, vant Compromised, Blocked by Sonatype resource"/index.html)

[Counterfeit ESLint and Node 'types' Libraries Downloaded Thousands of Times Abuse Pastebin](/content/blog/counterfeit-eslint-and-node-types-libraries-downloaded-thousands-of-times-abuse-pastebin "Internal link to Counterfeit ESLint and Node 'types' Libraries Downloaded Thousands of Times Abuse Pastebin resource"/index.html)

[Fake npm IP Checker Utilities Deliver Crypto Stealer Malware](/content/blog/fake-ip-checker-utilities-on-npm-are-crypto-stealers "Internal link to Fake npm IP Checker Utilities Deliver Crypto Stealer Malware resource"/index.html)

[Lottie Player Compromised in Supply Chain Attack - All You Need to Know](/content/blog/lottie-player-compromised-in-supply-chain-attack-all-you-need-to-know "Internal link to Lottie Player Compromised in Supply Chain Attack - All You Need to Know resource"/index.html)

[Counterfeit Lodash Attack Leverages AnyDesk to Target Windows Users](/content/blog/counterfeit-lodash-attack-leverages-anydesk-to-target-windows-users "Internal link to Counterfeit Lodash Attack Leverages AnyDesk to Target Windows Users resource"/index.html)

['Netfetcher' Package Drops Illicit 'Node' Binary on Windows](/content/blog/pyfetcher-netfetch-drop-netflix-checker-on-windows "Internal link to 'Netfetcher' Package Drops Illicit 'Node' Binary on Windows resource"/index.html)

[Crypto Enthusiasts Flood npm With More Than 281,000 Bogus Packages Overnight](/content/blog/crypto-enthusiasts-flood-npm-with-281000-bogus-packages-overnight "Internal link to Crypto Enthusiasts Flood npm With More Than 281,000 Bogus Packages Overnight resource"/index.html)

[Ideal Typosquat 'solana-py' Steals Your Crypto Wallet Keys](/content/blog/an-ideal-pypi-typosquat-solana-py-is-here-to-steal-your-crypto-keys "Internal link to Ideal Typosquat 'solana-py' Steals Your Crypto Wallet Keys resource"/index.html)