The Problem With PGP Keys in PIPI

Reverting labs found two NPM packages that contain remote admin tools. Some of those impersonation attempts, the package for example they're looking at here is note.js encrypt agent. There is a legitimate package called agent base and they're probably sort of hoping to be mistaken for it. This package was sitting in NPM for about two months. And of course you'll find more details at reversing labs link in the show notes.