SC Media - A malicious npm package, posing as a smart contract auditor, secretly installs the Quasar RAT malware, enabling remote access and data theft, exposing vulnerabilities in software supply chains

https://www.scworld.com/news/npm-package-poses-as-legit-ethereum-smart-contract-injects-quasar-rat

A malicious npm package disguised as a smart contract bug detector secretly installs the Quasar RAT malware, allowing attackers remote access and data theft.

This supply chain attack highlights the critical need for developers and organizations to meticulously verify the source and integrity of all software packages before installation.

Users should prioritize robust security practices, including monitoring network activity and implementing strong access controls, to mitigate the risk of similar attacks.