The Register on MSN

Crims poison 150K+ npm packages with token-farming malware

Amazon spilled the TEA Yet another supply chain attack has hit the npm registry in what Amazon describes as "one of the ...
SecurityWeek

Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign

More than 150,000 malicious packages were published in the NPM registry as part of a recently uncovered spam campaign, Amazon ...
Dark Reading

150,000 Packages Flood NPM Registry in Token Farming Campaign

A self-replicating attack led to a tidal wave of malicious packages in the NPM registry, targeting tokens for the tea.xyz ...
InfoWorld

Worm flooding npm registry with token stealers still isn’t under control

Goal is to steal Tea tokens by inflating package downloads, possibly for profit when the system can be monetized.
The Daily Dot

‘Threw the package at our door‘: Amazon customer gets shampoo delivered to his house. Then he takes a look at the damage to his front door

Jason Allure (@jason_w_allure) initially posted a TikTok that shows the driver standing outside his driveway. What appears to be a package is launched from the worker’s hand, landing directly at the ...