News for hackers. Stuff that matters.

A comment on Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan. Parent comment

Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by narrator on Tuesday March 31, 2026 @05:14AM (#47584668)
A security company could set up a honeypot machine that installs new releases of everything automatically and have a separate machine scan its network traffic for suspicious outbound connections.
[ Parent | on HN ]
Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by mike_hearn on Tuesday March 31, 2026 @10:16AM (#47587747)
The problem is what counts as suspicious. StepSecurity are quite clear in their post that they decide what counts as anomalous by comparing lots of open source runs against prior data, so they can't figure it out on their own.
[ Parent | on HN ]