CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Products

typo-crypto npm Package

July 30, 2026

typo-crypto is a malicious npm package designed to impersonate crypto-js, first published in March 2025. It contained a trojanized file (core.js) and is considered a test run by Amazon for later attacks.