Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware (thehackernews.com)

• Four malicious npm packages identified, including a clone of the Mini Shai-Hulud worm.
• Packages distribute infostealer and Phantom Bot DDoS malware.
• Attack targets the software supply chain to compromise developers.

"Security researchers have identified four malicious npm packages, including a clone of the 'Mini Shai-Hulud' worm, that are actively distributing info-stealing malware and Phantom Bot DDoS capabilities. These packages exploit the software supply chain, posing a serious threat to developers and organizations relying on npm."