![Malicious “express-dompurify” npm Package Steals Browser and Cryptocurrency Wallet Data](https://cdn.sanity.io/images/cgdhsj6q/production/7538f20fbd0e4ba1d0f54062eabf3f411225473f-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Malicious “express-dompurify” npm Package Steals Browser and Cryptocurrency Wallet Data
The Socket Research team breaks down a malicious npm package targeting the legitimate DOMPurify library. It uses obfuscated code to hide that it is exfiltrating browser and crypto wallet data.