importantSYS.SOURCE: The Hacker News• 2026-08-08T00:18:17+05:30

800 Malicious npm Packages Deploy Cross-Platform RAT and Infostealer Payloads

#npm #malware #infostealer #supply chain #cybersecurity

Nearly 800 malicious npm packages were discovered using typo-squatting and AI-generated names to deliver cross-platform RAT and infostealer malware targeting Windows, Mac, and Linux systems. The campaign employs complex payload delivery mechanisms through Cloudflare Workers and DNS TXT records, with potential ties to financial institution targeting and evolution from previous supply chain attacks.

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems.

"These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer payload," OpenSourceMalware researcher Paul

Read original article

*** END OF TRANSMISSION ***

> FIX FOR MULTI-HOMED HOSTS HANDLING IN NETWORK APPLICATION > NASA EXTENDS OPERATION OF 48-YEAR-OLD VOYAGER 2 SPACECRAFT FOR ONE MORE YEAR > NIXPKGS CORE TEAM DISSOLVES DUE TO GOVERNANCE CHALLENGES AND BURNOUT > OPENAI SUSPENDS DEVELOPMENT OF ASTRA MODEL DUE TO CYBERSECURITY RISKS > U.S. DEPARTMENT OF ENERGY UNVEILS GENESIS OPEN MODELS INITIATIVE FOR ADVANCED RESEARCH COLLABORATION > RIPPLING DEVELOPS AI SPEND CONSOLE TO MONITOR EMPLOYEE AI USAGE AND COSTS > WACOM MOVINKPAD 11 REVIEW: MID-RANGE ANDROID TABLET FOR DIGITAL ARTISTS > EX-NSA CHIEF WARNS AGAINST INTERNET-CONNECTED WATER SYSTEM CONTROLLERS AMID SUSPECTED IRANIAN CYBERATTACKS > POLISH PUBLIC SECTOR WEBSITES EXPOSED TO CYBER THREATS VIA VULNERABLE CMS AND UNPATCHED SOFTWARE > GENERATING IMAGES FROM CONTROL FLOW GRAPHS IN REVERSE ENGINEERING> FIX FOR MULTI-HOMED HOSTS HANDLING IN NETWORK APPLICATION > NASA EXTENDS OPERATION OF 48-YEAR-OLD VOYAGER 2 SPACECRAFT FOR ONE MORE YEAR > NIXPKGS CORE TEAM DISSOLVES DUE TO GOVERNANCE CHALLENGES AND BURNOUT > OPENAI SUSPENDS DEVELOPMENT OF ASTRA MODEL DUE TO CYBERSECURITY RISKS > U.S. DEPARTMENT OF ENERGY UNVEILS GENESIS OPEN MODELS INITIATIVE FOR ADVANCED RESEARCH COLLABORATION > RIPPLING DEVELOPS AI SPEND CONSOLE TO MONITOR EMPLOYEE AI USAGE AND COSTS > WACOM MOVINKPAD 11 REVIEW: MID-RANGE ANDROID TABLET FOR DIGITAL ARTISTS > EX-NSA CHIEF WARNS AGAINST INTERNET-CONNECTED WATER SYSTEM CONTROLLERS AMID SUSPECTED IRANIAN CYBERATTACKS > POLISH PUBLIC SECTOR WEBSITES EXPOSED TO CYBER THREATS VIA VULNERABLE CMS AND UNPATCHED SOFTWARE > GENERATING IMAGES FROM CONTROL FLOW GRAPHS IN REVERSE ENGINEERING