Flooding Dropper: Sonatype’s Tracking Name for npm Malware Campaign

Flooding Dropper is the moniker used by Sonatype for the campaign involving nearly 800 malicious npm packages. The campaign delivers cross-platform malware with RAT and infostealer capabilities, using WEL1DROPPER as the initial downloader.