Research · InfosecFeed Brief

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

What you need to know

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. "These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer payload,"…

Source transparency

This is an InfosecFeed curated brief based on reporting from The Hacker News. InfosecFeed does not claim ownership of the original reporting.

Read the original report at The Hacker News ↗