Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security,…
Tag: JavaScript
jsDelivr: Free CDN for Open Source Projects
jsDelivr is a free content delivery network for open source projects. It was used by the G2 module to fetch remote JavaScript…
G2: Remote Script Loader in npm Proxy Campaign
A remote script loader module found in the malicious npm packages, which fetches JavaScript from a GitHub repository through the jsDelivr CDN…
pnpm: Fast, Disk Space Efficient Package Manager
pnpm is a package manager for JavaScript that emphasizes speed and disk space efficiency. It includes cooldown features to mitigate malicious package…
Windows Script Host: Initial Execution Vector in VEIL#DROP
Windows Script Host was used to execute the initial JavaScript payload in the VEIL#DROP campaign, launching PowerShell with execution policy bypasses.
145 Mastra npm Packages Compromised in Supply Chain Attack, Crypto-Stealer Deployed
On June 17, 2026, a software supply chain attack codenamed 'easy-day-js' compromised 145 npm packages under the @mastra/* namespace, a popular open-source…
BeaverTail: JavaScript Malware Used in Contagious Interview Campaign
A known JavaScript malware associated with the Contagious Interview campaign. Delivered via malicious packages and extensions, it searches for configuration files and…
Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
An analysis of a popular Google Chrome ad block extension for YouTube, named Adblock for YouTube (ID: cmedhionkhpnakcndndgjdbohmhepckk), has uncovered the ability…