恶意npm包冒充Twilio Bug-Bounty探测器，可以泄露凭据

网络安全研究人员披露了一个名为“tw-pkgprobe-7731”的恶意npm软件包的详细信息，该软件包伪装成针对将Twilio集成到其应用程序中的开发人员的安全工具

原文标题：Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

信源：The Hacker News ｜ 阅读原文

Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a security tool targeting developers integrating Twilio into their applications, while stealthily attempting to harvest sensitive data. The

—— 开源情报自动采集 · 网