Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. "These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer payload," OpenSourceMalware researcher Paul
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
TN

The Hacker News

3h ago
0 0

Discussion

Don’t hold back—comment!

Don’t wait—start sharing your ideas now!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
Metabase SQLi zero-day exploited in customer data-theft attacks

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework…
Golden Greta

Golden Greta

2026-08-07 23:40
0
bleepingcomputer.com
Real emails, hijacked payments: Two H1 2026 attack chains

Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a banking-malware campaign,…
NightCurator

NightCurator

5h ago
0
thehackernews.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - P…

WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management sys…
TN

The Hacker News

6h ago
0
thehackernews.com
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later S…

A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has bee…
RM

ryan maybe

11h ago
0
bleepingcomputer.com
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay…

OpenAI is rolling out a more reliable version of ChatGPT GPT-5. 6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with GPT-5. 6 L…
Marcus Allen

Marcus Allen

15h ago
0
darkreading.com
The Coordination Gap: How Attackers Are Outpacing Law Enforceme…

The fight against cybercrime continues because threat actors have adapted their strategies to avoid deterrents, but law enforcement still operates in silos.
DR

Dark Reading

15h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - P…

WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management sys…
TN

The Hacker News

6h ago
0
thehackernews.com
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later S…

A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has bee…
RM

ryan maybe

11h ago
0
thehackernews.com
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape…

Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and…
SA

SariMartinez

1d ago
0
thehackernews.com
CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Cr…

Coinspect has identified CryptoJS. lib. WordArray. random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScri…
TN

The Hacker News

1d ago
0
thehackernews.com
Poison Claude Sells Discounted Claude Access While Its Operator…

Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intelligence (AI) models on undergrou…
Giulia

Giulia

2d ago
0
thehackernews.com
When Vibe Hacking Turns AI into the Junior Hacker Every Adversa…

The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break. Securi…
TN

The Hacker News

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest