Title: LofyLife: malicious npm packages steal Discord tokens and bank card data

Published:  Thu, 28 Jul 2022 12:00:41 +0000

Description: This week, we identified four suspicious packages in the Node Package Manager (npm) repository. All these packages contained highly obfuscated malicious Python and JavaScript code. We dubbed this malicious campaign “LofyLife”.

Read full article on SECURELIST.COM