importantSYS.SOURCE: The Hacker News• 2026-08-04T00:13:53+05:30

Malicious npm Packages Deploy Cross-Platform RAT Targeting Alibaba Developers

#npm #supply_chain #rat #cybersecurity #open_source

Cybersecurity researchers identified 18 malicious npm packages impersonating Alibaba's private packages, delivering a cross-platform Remote Access Trojan (RAT) to target Chinese-speaking developers. The attack uses a sophisticated supply chain method, leveraging compromised dependencies to execute payloads across Windows, Linux, and macOS, enabling espionage and lateral movement.

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments.

One of the packages in question is "lib-mtop," an unscoped package with the same name as a private Alibaba package

Read original article

*** END OF TRANSMISSION ***

> APPLE CHALLENGES UK GOVERNMENT'S REQUEST FOR ICLOUD BACKDOOR ACCESS > MALICIOUS NPM PACKAGES DEPLOY CROSS-PLATFORM RAT TARGETING ALIBABA DEVELOPERS > APPLE RELEASES FUNCTIONAL SIRI IN IOS 27 AFTER YEARS OF DELAYS > OUTERNET: TRANSFORMING DIGITAL SAVED POSTS INTO OFFLINE EXPLORATION EXPERIENCES > WHATSAPP ADDRESSES ACCOUNT DISABLING ISSUE AFFECTING MULTIPLE USERS > INTRODUCING CLOUDFLARE'S BILLABLE USAGE API FOR PROGRAMMATIC COST MONITORING > SEQUOIA PARTNER SHAUN MAGUIRE LEADS $1B INVESTMENT IN NUCLEAR STARTUP VALAR ATOMICS > OPTIMIZING LARGE LANGUAGE MODELS FOR SCALABLE DEPLOYMENT: KIMI AND GLM CASE STUDY > 45TH ANNIVERSARY OF KERMIT AND NEW C-KERMIT RELEASE AFTER 15 YEARS WITH LEGACY CODE CHALLENGES > LEVERAGING TASK RUNNERS FOR CONSISTENT DEVELOPMENT WORKFLOWS> APPLE CHALLENGES UK GOVERNMENT'S REQUEST FOR ICLOUD BACKDOOR ACCESS > MALICIOUS NPM PACKAGES DEPLOY CROSS-PLATFORM RAT TARGETING ALIBABA DEVELOPERS > APPLE RELEASES FUNCTIONAL SIRI IN IOS 27 AFTER YEARS OF DELAYS > OUTERNET: TRANSFORMING DIGITAL SAVED POSTS INTO OFFLINE EXPLORATION EXPERIENCES > WHATSAPP ADDRESSES ACCOUNT DISABLING ISSUE AFFECTING MULTIPLE USERS > INTRODUCING CLOUDFLARE'S BILLABLE USAGE API FOR PROGRAMMATIC COST MONITORING > SEQUOIA PARTNER SHAUN MAGUIRE LEADS $1B INVESTMENT IN NUCLEAR STARTUP VALAR ATOMICS > OPTIMIZING LARGE LANGUAGE MODELS FOR SCALABLE DEPLOYMENT: KIMI AND GLM CASE STUDY > 45TH ANNIVERSARY OF KERMIT AND NEW C-KERMIT RELEASE AFTER 15 YEARS WITH LEGACY CODE CHALLENGES > LEVERAGING TASK RUNNERS FOR CONSISTENT DEVELOPMENT WORKFLOWS