Cybersecurity researchers have identified four new npm packages containing information-stealing malware, including a clone of the Shai-Hulud worm, with the most notable being chalk-tempalte, which has 825 downloads.
Given the discovery of malicious npm packages, including a clone of the Shai-Hulud worm, it's crucial for cybersecurity professionals to enhance their threat intelligence and monitoring of open-source library dependencies. Specifically, integrating automated tools to detect and block known malicious packages like "chalk-tempalte" and others in your software supply chain could mitigate risks associated with information-stealing malware.