Security

JavaScript Packages Caught Stealing Environment Variables

August 4, 2017
Catalin Cimpanu

Click here to visit Original posting

On August 1, npm Inc. — the company that runs the biggest JavaScript package repository — removed 38 JavaScript npm packages that were caught stealing environment variables from infected projects. [...]