Skip to content
You're Invited: Delivering malware via Google Calendar invites and PUAs
aikido.dev | blog | #supply-chain | #malware | #npm | #obfuscation | #aikido | #malware-analysis | #eval | #package-security | #unicode | #aikido-intel | #npm-malware | #unicode-pua | #google-calendar
Summary
Aikido found npm package os-info-checker-es6 hiding malicious logic behind Unicode Private Use Area characters, decoded by a native binary into base64 for eval() to execute, evading code review.
- Published
- Collected