> TritonInfoSec News
Home / Aug 09, 2026 / Story
0
#7 The Hacker News general August 07, 2026 at 18:48 UTC

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

By [email protected] (The Hacker News)

AI Summary

Researchers at OpenSourceMalware identified nearly 800 malicious npm packages using typosquatting and AI-generated names to deliver a cross-platform RAT and infostealer targeting Windows, macOS, and Linux simultaneously. The scale of the campaign and its multi-OS payload coverage pose significant supply chain risk for developers who install packages without verification.

Read full article → https://thehackernews.com/2026/08/nearly-800-malic…

Relevance score: 78.0/100

# More from August 09

  1. 1
    New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens The Hacker News
  2. 2
    Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication The Hacker News
  3. 3
    Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts The Hacker News
  4. 4
    N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist The Hacker News
  5. 5
    New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables The Hacker News
  6. 6
    Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails The Hacker News
  7. 8
    TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign The Hacker News
  8. 9
    North Carolina Ports confirms cyberattack disrupting operations BleepingComputer
  9. 10
    Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access The Hacker News