Malicious npm Packages Caught Installing Remote Access Trojans

The security team behind the “npm” repository for JavaScript libraries removed two npm packages this Monday for containing malicious code that installed a remote access trojan (RAT) on the computers of developers working on JavaScript projects. From a report: The name of the two packages was jdb.js and db-json.js., and both were created by the same author and described themselves as…

Huawei’s Silicon Valley Outpost Allegedly Stole Trade Secrets From Cisco

“Controversial Chinese technology firm Huawei and its Santa Clara-based subsidiary Futurewei allegedly stole trade secrets from San Jose tech giant Cisco and used them to copy Cisco routers,” reports the San Jose Mercury News, citing the federal indictment released Thursday. The U.S. Department of Justice claimed in its racketeering indictment and a news release that Huawei and its Silicon Valley subsidiary…