Skip to content
Glassworm Strikes Popular React Native Phone Number Packages
aikido.dev | blog | #supply-chain | #malware | #npm | #supply-chain-security | #react-native | #glassworm | #crypto-stealer
Summary
Two React Native packages with ~30,000 combined weekly downloads were backdoored via preinstall hooks fetching a multi-stage Windows crypto and credential stealer. Aikido decrypted the live payload.
- Published
- Collected