Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During InstallThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
React2Shell under attack: RondoDox Botnet spreads miners and malwareSecurity Affairs·Jan 1, 14:31 UTC · Jan 1, 2026MalwareCVE-2025-55182CVE-2024-3721CVE-2024-1285660
React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple SectorsThe Hacker News·Dec 11, 04:19 UTC · Dec 11, 2025MalwareCVE-2025-5518260
New EtherRAT backdoor surfaces in React2Shell attacks tied to North KoreaSecurity Affairs·Dec 10, 14:45 UTC · Dec 10, 2025MalwareCVE-2025-5518260
North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie MalwareThe Hacker News·Nov 28, 16:18 UTC · Nov 28, 2025Malware42
Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain AttackThe Hacker News·Dec 21, 08:59 UTC · Dec 21, 2024Malware42
North Korean Hackers Suspected in New Wave of Malicious npm PackagesThe Hacker News·Aug 17, 13:38 UTC · Aug 17, 2023Malware42