importantSYS.SOURCE: The Hacker News• 2026-08-08T00:18:17+05:30

800 Malicious npm Packages Deploy Cross-Platform RAT and Infostealer Payloads

#npm #malware #infostealer #supply chain #cybersecurity

Nearly 800 malicious npm packages were discovered using typo-squatting and AI-generated names to deliver cross-platform RAT and infostealer malware targeting Windows, Mac, and Linux systems. The campaign employs complex payload delivery mechanisms through Cloudflare Workers and DNS TXT records, with potential ties to financial institution targeting and evolution from previous supply chain attacks.

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems.

"These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer payload," OpenSourceMalware researcher Paul

Read original article

*** END OF TRANSMISSION ***

> AI ADOPTION AMONG YOUNG USERS (9-18) RAISES CONCERNS OVER CRITICAL THINKING DEVELOPMENT > APPLE REMOVES USER CONSENT OPTION FOR AI FEATURES IN MACOS 15.3 UPDATE > SIDECOPY APT GROUP EXPANDS TARGETING OF INDIAN ACADEMIA VIA REVERSERAT SPEAR-PHISHING > HIDDEN META MUSE SETTING ENABLES AI ASSISTANT BACKDOOR VIA DICTATION HIJACKING > GZIP AS A LANGUAGE MODELING APPROACH VIA COMPRESSION-PREDICTION EQUIVALENCE > WORDPRESS COMMENT2SHELL VULNERABILITY EXPLOITS XSS TO ACHIEVE RCE VIA ADMIN SESSION > MORPHOTONICS SECURES €40M TO SCALE NANOIMPRINT LITHOGRAPHY FOR AR DISPLAYS AND DATA CENTER OPTICS > ACTIVE EXPLOITATION OF ZYXEL AND VEEAM VULNERABILITIES ENABLES COMMAND EXECUTION AND SYSTEM ACCESS > 2019 USED THINKPAD PURCHASE GUIDE: FEATURES, RECOMMENDATIONS, AND EBAY DEAL STRATEGIES > MIMO-V2.6-PRO MODEL ANALYSIS: INTELLIGENCE, PERFORMANCE, AND COST EVALUATION> AI ADOPTION AMONG YOUNG USERS (9-18) RAISES CONCERNS OVER CRITICAL THINKING DEVELOPMENT > APPLE REMOVES USER CONSENT OPTION FOR AI FEATURES IN MACOS 15.3 UPDATE > SIDECOPY APT GROUP EXPANDS TARGETING OF INDIAN ACADEMIA VIA REVERSERAT SPEAR-PHISHING > HIDDEN META MUSE SETTING ENABLES AI ASSISTANT BACKDOOR VIA DICTATION HIJACKING > GZIP AS A LANGUAGE MODELING APPROACH VIA COMPRESSION-PREDICTION EQUIVALENCE > WORDPRESS COMMENT2SHELL VULNERABILITY EXPLOITS XSS TO ACHIEVE RCE VIA ADMIN SESSION > MORPHOTONICS SECURES €40M TO SCALE NANOIMPRINT LITHOGRAPHY FOR AR DISPLAYS AND DATA CENTER OPTICS > ACTIVE EXPLOITATION OF ZYXEL AND VEEAM VULNERABILITIES ENABLES COMMAND EXECUTION AND SYSTEM ACCESS > 2019 USED THINKPAD PURCHASE GUIDE: FEATURES, RECOMMENDATIONS, AND EBAY DEAL STRATEGIES > MIMO-V2.6-PRO MODEL ANALYSIS: INTELLIGENCE, PERFORMANCE, AND COST EVALUATION