
In recent developments, security researchers have unearthed two new malicious packages on the npm open source package manager that exploit GitHub as a repository for stolen Base64-encrypted SSH keys obtained from unsuspecting developers. This discovery highlights an alarming trend of cybercriminals utilizing open source package managers for malicious software supply chain campaigns. With reports indicating a significant surge in malicious








