#“sandworm_mode”


Active “SANDWORM_MODE” Campaign Targets Developers’ Secrets via Malicious npm Packages

Feb 23, 2026 // 14:20

A sophisticated supply chain worm campaign codenamed SANDWORM_MODE is actively targeting the npm ecosystem. This campaign uses malicious packages to harvest cryptocurrency keys, CI/CD secrets, and API […]