HERE'S HOW CAREFULLY CONCEALED BACKDOOR IN FAKE AWS FILES ESCAPED MAINSTREAM NOTICE

Summary from the TLDR InfoSec newsletter

This post dives into how two fake AWS packages on the NPM JavaScript repository contained hidden code that backdoored developers' computers. The packages, which were downloaded hundreds of times, mimicked a legitimate library but included additional files with concealed malicious code.