Destructive malware available in NPM repo went unnoticed for 2 years

Q: How long will it take to read this news story?

The story "Destructive malware available in NPM repo went unnoticed for 2 years" has 132 words across 24 sentences, which will take approximately 1 - 2 minutes for the average person to read.

Q: Which news outlet covered this story?

The story "Destructive malware available in NPM repo went unnoticed for 2 years" was covered 12 hours ago by Ars Technica, a news publisher based in United States.

Q: How trustworthy is 'Ars Technica' news outlet?

Ars Technica is a fully independent (privately-owned) news outlet established in 1998 that covers mostly technology news. The outlet is headquartered in United States and publishes an average of 18 news stories per day. It's most recent story was published 9 hours ago.

Q: What do people currently think of this news story?

The sentiment for this story is currently Negative, indicating that people regard this as "bad news".

Q: How do I report this news for inaccuracy?

You can report an inaccurate news publication to us via our contact page. Please also include the news #ID number and the URL to this story.<ul><li>News ID: #28915240</li><li>URL: https://gaia.beamstart.com/news/destructive-malware-available-in-npm-1747944617768</li></ul>

Ars Technica 12h ago

Destructive malware available in NPM repo went unnoticed for 2 years - Ars Technica

Quick Summary:

Payloads were set to spontaneously detonate on specific dates with no warning.

The packages have been available for download for more than two years and accrued roughly 6,200 downloads over that time.“What makes this campaign particularly concerning is the diversity of attack vectors—from subtle data corruption to aggressive system shutdowns and file deletion,” Pandya wrote.“The packages were designed to target different parts of the JavaScript ecosystem with varied tactics.

Researchers have found malicious software that received more than 6,000 downloads from the NPM repository over a two-year span, in yet another discovery showing the hidden threats users of such open source archives face.