Socket has identified a new malware loader called XORIndex incorporated into malicious packages published to the npm registry ...

Once opened in a browser, the code decrypts a secondary payload using a static XOR key and then redirects the user to an ...