Lone attacker published 14 malicious npm packages mimicking popular OpenSearch, Elasticsearch libraries

A single npm user on Thursday published 14 malicious packages within a four-hour window, all mimicking popular OpenSearch, Elasticsearch, DevOps, and environment-configuration libraries, according to Microsoft. It’s the latest in a seemingly never-ending string of supply chain attacks targeting developer tools, and stealing …

[amanfromMars 1]

In A.N.Other Register of 0day News Today at the All You Can Buffet

Lone attacker published 14 malicious npm packages mimicking popular OpenSearch, Elasticsearch libraries

And then Microsoft busted them all

Lone attacker published 14 malicious npm packages mimicking popular OpenSearch, Elasticsearch libraries

And Microsoft shares all of them for all in a free for all. Bravo