Quote from: Dictator69 on Today at 09:26:44 AM

Quote from: promise444c5 on September 09, 2025, 07:48:01 PM

This mainly affects apps built on JavaScript frameworks running on devices that actively connect to the internet. Don’t know how the malware works but I’d just be careful in case any of my other React Native,Electron.. apps might have received updates recently.

Apps that are built on JavaScript libraries, in short NPM is the playstore for these developers who can use any library from the store by just writing commands, there are millions of open source libraries in that play store, so one developer qix with many open source libraries clicked on a phishing link while masturbating watching porn maybe, he clicked it and hackers got in and installed their love letters.

There’s a lot wrong with your post Roll Eyes

He did clicked a link but that was from his email account , he got a mail from the attacker impersonating NPM support, I don’t know where you got the corn sausage Grin

story..

Quote

It does not basically going to affect the app used by any of those languages i.e React, electron, but the apps that use packages from npm. Chill the issue has been solved now.

The apps that uses NPM packages will be built on what then Roll Eyes

.. and how do you tell what libraries if they aren’t open sourced..
Not sure if you read other posts I made regarding it, I mentioned he said it’s been resolved but who knows where it might have reached by now.