Three JavaScript packages have been removed from the npm portal for containing malicious code

Channel:
Category5 Technology TV with Robbie Ferguson
Subscribers:
35,900
Published on ● Video Link: https://www.youtube.com/watch?v=MTsBrLzSQsQ


Duration: 2:30
120 views
0

❤️️ Join us on Patreon: https://patreon.com/Category5

💻 Visit Our Web Site: https://Category5.TV

🐦 Twitter: https://twitter.com/Category5TV

👍 Facebook: https://facebook.com/cat5tv/

📸 Instagram: https://instagram.com/category5tv

Three JavaScript libraries found on the npm portal -- plutov-slack-client, nodetest199 and nodetest1010 -- opened shells on the computers of developers who imported the packages into their projects. The npm security team have removed the package, but are warning users that there is no guarantee this will remove all malicious software resulting from installing it.



Other Videos By Category5 Technology TV with Robbie Ferguson


2020-11-01NASA successfully touched down on an asteroid to collect a sample
2020-11-01SpaceX Starlink Internet service beta has begun
2020-10-31Ubuntu Desktop is now OFFICIAL on Raspberry Pi 4
2020-10-31Zoom end-to-end encryption FREE for all users
2020-10-31youtube-dl Under Attack by RIAA: DMCA Takedown
2020-10-31AI Turns Any Selfie Photo Into SCARY ZOMBIE
2020-10-31The Orville SCARY HALLOWEEN GAME
2020-10-25FREE DIY Internet Proxy Server Anywhere In The World
2020-10-25Jeff hopes to create his own PCBs, but Robbie prefers prototype boards ... for now.
2020-10-24Compute Module 4 has been released from Raspberry Pi
2020-10-24Three JavaScript packages have been removed from the npm portal for containing malicious code
2020-10-24Xiaomi 80W Wireless Charge 100% in 19 Minutes!
2020-10-24Nokia is building a 4G cellular network... on the moon.
2020-10-24Hackers are using a severe Windows bug to compromise un-patched servers
2020-10-23We told Jeff to look at the camera more
2020-10-20Apple pwned, Update Breaks Windows 10 Update, Pin Puzzle ads banned, iPhone 12, Micro:bit Upgraded
2020-10-17Apple's new iPhone lineup has been announced
2020-10-17The BBC Micro:bit is getting a big upgrade, making it powerful enough for AI applications
2020-10-17Misleading pin puzzle ads have been banned in the UK
2020-10-17An optional update in Windows 10 breaks its ability to upgrade in future
2020-10-16I Paid People on Fiverr to Remix my Theme Song Like a Retro 8-Bit Video Game


Tags:
javascript
npm portal
malicious code
exploit
shell
libraries
npm security team
security
development
vulnerability
backdoor
plutov-slack-client
nodetest199
nodetest1010
bekah ferguson