DOZENS OF MALICIOUS PACKAGES ON NPM COLLECT HOST AND NETWORK DATA

Summary from the TLDR InfoSec newsletter

Socket's threat research team discovered 60 packages on NPM that collect sensitive information about a device and send it to Discord. The malicious packages contain a post-install script that collects hostnames, internal IPs, user home directories, current working directories, usernames, and system DNS servers. Socket did not detect any additional payloads, but reported the packages for removal.