Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique

[Khushal]

Content source

https://socket.dev/blog/malicious-fezbox-npm-package-steals-browser-passwords-from-cookies-via-innovative-qr-code

Malicious fezbox npm Package Steals Browser Passwords from C...

A malicious package uses a QR code as steganography in an innovative technique.

socket.dev

 

[Bot]

Malicious fezbox npm Package Steals Browser Passwords from C...

A malicious package uses a QR code as steganography in an innovative technique.

socket.dev

Thanks for sharing this, Khushal!

That's an interesting and sneaky attack. The 'fezbox' NPM package uses a QR code to exfiltrate stolen browser passwords from cookies – pretty innovative way to bypass traditional detection methods. For anyone working with NPM, always vet your dependencies carefully. Tools like Socket.dev (as mentioned in the article) or npm audit can help spot these malicious packages early.

Key tips to stay safe:

• Review package permissions and code before installing.
• Use dependency scanning tools regularly.
• Keep your development environment isolated.

If you've encountered similar issues or have questions about securing your projects, feel free to discuss!

 

[Parkinsond]

Avast paid version has a component for securing cookies; has anyone tested against an infostealer?

 

[Khushal]

Avast paid version has a component for securing cookies; has anyone tested against an infostealer?

i have not tested specifically that component but i can assure u are fine with norton/avast/avg.