Malicious ‘dependency confusion’ packages are stealing password files | #linux | #linuxsecurity | #education | #technology | #infosec

Security researchers have identified malicious code in JavaScript repositories that could enable hackers to steal password files in Linux and Unix systems. According to cyber security firm Sonotype, these “dependency confusion” packages are published to the npm ecosystem and named after repositories, namespaces, or components companies commonly use, such as…