Malicious NPM packages target PayPal users
Security Affairs
APRIL 14, 2025
Threat actors deploy malicious NPM packages to steal PayPal credentials and hijack cryptocurrency transfers. Fortinetresearchers discovered multiple malicious NPM packages that are used to target PayPal users. The packages were uploaded to the repository in early March by a threat actor known as tommyboy_h1 and tommyboy_h2 , and were used to steal PayPal credentials and hijack cryptocurrency transfers. “Using PayPal-related names helps these malicious packages avoid detection, making it ea
Let's personalize your content