Malicious npm Packages Deliver PylangGhost RAT in New Software Supply Chain Campaign
17/03/2026-10:47 17/03/2026-10:50 מחשבים וטכנולוגיה Cyber Security News דיווח
A remote access trojan known as PylangGhost has appeared on the npm registry for the first time, concealed inside two malicious JavaScript packages. The malware, first publicly disclosed by Cisco Talos in June 2025 and attributed to the North Korean