Glassworm Strikes Popular React Native Phone Number Packages in a New Supply Chain Attack

DRANK

Aikido Security researchers recovered and decrypted the full payload chain from two malicious React Native packages. Here's what the malware does and what to look for.