CyberSecurityBoardThreat Intel · CVEs · Products
Malware

js-digest: Second Wave Malicious npm Package

June 25, 2026

The npm package js-digest was used in a second wave of the Atomic Arch attack, delivered via bun install. It contained a separate malicious ELF binary.