18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Cybersecurity researchers have found 18 malicious npm packages that deliver a cross-platform remote access trojan to users of Alibaba developer tools. The attack is a targeted software supply chain attack aimed at Chinese-speaking environments. One of the malicious packages is called "lib-mtop", which has the same name as a private Alibaba package, suggesting an attempt to disguise itself as a legitimate package. This set of malicious packages is part of a sophisticated attack. The packages target users of Alibaba tools, potentially giving attackers remote access to compromised systems. The attack highlights the risk of software supply chain attacks in targeted environments.