Crypto Ticker:
sysadmin from 4sysops.com

Nearly 800 malicious npm packages hide RAT behind a simple require()

IT News
Aug 7, 2026 at 20:08
13 Views
0 Comments
Nearly 800 malicious npm packages hide RAT behind a simple require()

Nearly 800 malicious npm packages are using README instructions—not npm lifecycle scripts—to launch a cross-platform RAT and infostealer when developers import them with `require()`. The campaign targets Windows, macOS, and Linux, with payload delivery backed by Cloudflare Workers and DNS TXT records. Source

Read the full article at the source.

Read Original Article

Join the discussion — comment, vote, and submit links.

Register
Was this helpful?
Share:

Comments (0)

Please login or register to join the discussion

No comments yet. Be the first to comment!

Related News

MCP roadmap targets agent identity, event-driven agents, and smarter tool discovery
MCP roadmap targets agent identity, event-driven agents, and smarter tool discovery
7 hours ago
Specially Crafted NTFS File-System Image Allows Root Access On Linux With NTFS3 Driver
8 hours ago
5 things about NAT I wish someone had explained sooner
5 things about NAT I wish someone had explained sooner
9 hours ago
AMD RDNA 4m Firmware Published For Linux Ahead Of Launch
10 hours ago
It wasn’t my photos or files — this one thing was eating one-third of my Google Drive storage
It wasn’t my photos or files — this one thing was eating one-third of my Google Drive storage
10 hours ago

Browse by Category

blog crypto news privacy startup sysadmin technology