Open Source Poisoned Patches Infect Local Software darkreadingNate Nelson, Contributing Writer

Malicious packages lurking on open source repositories like npm have become less effective, so cyberattackers are using a new strategy: offering “patches” for locally installed programs. Malicious packages lurking on open source repositories like npm have become less effective, so cyberattackers are using a new strategy: offering “patches” for locally installed programs. 

​Read More