npm malware

@npm_malware

📣 We tweet malicious packages detected on npm in real-time. 🚨 Not affiliated with @npmjs or @github. 🛡 Powered by the @SocketSecurity threat feed. ✨

socket.dev

Joined August 2022

Following

3,688

Followers

Replies Reposts Media

npm malware
@npm_malware
Apr 27
⚠️ New threat detected: [email protected] ⚠️ Attributed by the Socket Threat Research Team to North Korea’s **“Contagious Interview”** operation, this package is a **multi-stage Node.js infostealer/loader** that executes immediately on install, st...
devkit-scripts - npm Package File explorer - Socket
From socket.dev
npm malware
@npm_malware
Apr 27
⚠️ New threat detected: [email protected] ⚠️ This module is a high-risk remote code execution loader. It decodes hidden outbound URLs, downloads arbitrary JavaScript from the network, and executes it by streaming the payload into detached Node.js chil...
ozonex-sdk - npm Package File explorer - Socket
From socket.dev
npm malware
@npm_malware
Apr 27
⚠️ New threat detected: [email protected] ⚠️ The code performs unauthorized exfiltration of sensitive system information to an external Discord webhook without user consent. This constitutes malicious behavior consistent with spyware or backdoor malwar...
angklarjs - npm Package File explorer - Socket
From socket.dev
npm malware
@npm_malware
Apr 27
⚠️ New threat detected: [email protected] ⚠️ This module is an interpreter for bot command code and performs dynamic loading/execution of per-function modules and sends outputs to Discord. The file itself does not contain obvious ha... socket.dev/npm/package/ao…
npm malware
@npm_malware
Apr 26
⚠️ New threat detected: [email protected] ⚠️ The code engages in automated package creation and publishing, with the addition of posting content to WordPress sites using hard-coded credentials. This indic...
insane-unlimited-vc-glitch-for-nba-2k22-full-tutorial-537 - ...
From socket.dev