CyberSecurityBoardThreat Intel · CVEs · Products
Malware

Moika: Dependency Confusion Campaign Possibly Linked to New npm Attacks

August 7, 2026

Moika is a dependency confusion campaign observed in April that published over 250 malicious npm packages to steal environment information and deliver OS-specific payloads. The current campaign is suspected to be an evolution of Moika.