Vulnerabilities 6 min read
36 Malicious npm Packages Disguised as Strapi Plugins Target the Guardarian Ecosystem
Researchers discovered 36 npm packages posing as legitimate Strapi CMS plugins. In 13 hours of rapid evolution, 8 payload variants were deployed: Redis RCE, Docker escape, credential theft, and a persistent implant targeting the Guardarian fintech ecosystem.