Executing Malicious Programs Through ‘Postinstall’: SentinelOne’s Demo – Detection and Forensics

In this informative video, we delve into a pressing concern in the world of software development: exploiting npm’s ‘postinstall’ script vulnerability. SentinelOne takes you through a simulated scenario where a threat actor deploys a malicious npm package, ingeniously crafted to carry out a data exfiltration attack. We start by illustrating the method used by attackers […]