NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

Two malicious packages found in the npm package repository turned out to be hiding an open-source information-stealing malware called TurkoRat. Together, these packages (named nodejs-encrypt-agent and nodejs-cookie-proxy-agent) were downloaded about 1,200 times and were available for over two months before…








