TL;DR A malicious release of TensorLake's TypeScript SDK, [email protected], used an install hook to search for developer credentials and accept remote commands. Sonatype's code review found that its ...
Hackers use public blockchains as C2 channels for supply chain malware, evading domain blocks and stealing cloud credentials.