A team made up of security researchers from the Georgia Institute of Technology has found a way to exploit Node.js applications by manipulating the hidden properties used to track internal program ...

Attackers performed an email takeover attack on a dormant maintainer account and published new node-ipc versions containing credential stealing malware. A popular npm package called node-ipc has been ...