#npm


24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Aug 25, 2026 // 14:59

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style […]

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Aug 21, 2026 // 23:47

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an […]

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

Aug 8, 2026 // 01:05

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware […]

Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain

Aug 5, 2026 // 19:08

Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address […]

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Aug 5, 2026 // 00:39

Self-propagating malware named ‘ChainDrop’ has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. Infected packages include […]

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Aug 4, 2026 // 18:37

Self-propagating malware named ‘ChainDrop’ has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. Infected packages include […]

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Aug 4, 2026 // 00:57

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) […]

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

Aug 4, 2026 // 00:39

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. The cloud computing giant linked […]

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Aug 4, 2026 // 00:37

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) […]

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Aug 4, 2026 // 00:18

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) […]

Previous 1 2 3 4 … 12 Next