The campaign, which distributes dozens of malicious jQuery variants across npm, GitHub, and jsDelivr, appears to be a manual effort, and lacks the typical pattern that characterizes similar, related attacks.
Related Posts
When researchers from the University of Pennsylvania’s Annenberg School for…