ReversingLabs

Malicious npm Package Poses as Twilio Bug-Bounty Probe

Researchers discovered a malicious npm package that mimics a Twilio security tool to steal developer credentials and environment data.