Tag: Package Security
Miasma Worm Exploits Node GYP Build File to Inject Malicious Code in npm Packages
The Phantom Gyp technique exploits npm's automatic node gyp rebuild process to execute malicious code during package installation, bypassing standard…