Hackers Hijack 10 npm Packages to Spread PolinRider Malware Using Ethereum Blockchain
PolinRider loaders use a fixed Ethereum wallet to dynamically fetch payloads via dead drop, bypassing install hooks.
70
Organization
Sonatype Research Labs
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenNov 9, 2026
- Last mentioned2d ago
Timeline
1 articles · newest firstAppears with
- GitGuardianorganization · 1
- Sonatypevendor · 1
- PolinRiderthreat actor · 1
- @pubngo-stack/help-browserproduct · 1
- PolinRidermalware · 1
- @adminide-stack/user-activity-browserproduct · 1
- @adminide-stack/health-api-serverproduct · 1
- @adminide-stack/yantra-help-browserproduct · 1
- server-hemera-mongoproduct · 1
- @adminide-stack/forms-coreproduct · 1
- @adminide-stack/client-reduxproduct · 1
- @cdmbase/wiki-browserproduct · 1
- cdeopsproduct · 1
- @adminide-stack/utilsproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.