Malware

npm Worm Poisons Hundreds of Packages, Steals Credentials

August 04, 2026 1 min read 5 views
cybersecurity threats news
A credential-stealing npm worm spread from [email protected] to hundreds of packages, with 353 poisoned versions across 79 package names verified by SafeDep, and at least 868 packages reported by Aikido.

Was this article helpful?

0 found this helpful

Related Articles

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

1 min read

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

1 min read

Hirudo Android malware replaces banking apps to evade security checks

4 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo