JavaScript packages hide ‘protestware’ against Russian users

Security researchers from Socket have stumbled upon a digital booby trap set for Russian-language users within JavaScript packages. The researchers found two npm packages – with the rather innocuous names @link-loom/ui-sdk and @link-loom-react-sdk – that look normal on the surface. They’re designed to help developers create nice-looking pop-up notifications in web applications. Yet, beneath this…

Read More