⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Products

Bun: JavaScript Runtime Used in Malware Payload

July 27, 2026

Bun is a JavaScript runtime that the worm's stage one downloads (version 1.3.13) to execute a compiled credential-stealing bundle.

Discovered from: Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks