> TritonInfoSec News
Home / Oct 08, 2026 / Story
0
#9 The Hacker News general October 07, 2026 at 17:43 UTC

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

By [email protected] (The Hacker News)

AI Summary

Researchers from CloudSEK and Checkmarx detailed the MALFEX npm supply chain campaign, in which a single threat actor published 12 malicious packages since August 2023, eight of which accumulated 40,767 downloads before detection and delivered the Overlord RAT and an information stealer. The campaign's longevity — spanning over three years — underscores the persistent risk of malicious packages in open-source ecosystems. Developers using npm should audit dependencies for packages published by unknown or single-maintainer accounts.

Read full article → https://thehackernews.com/2026/10/eight-malicious-…

Relevance score: 72.0/100

# More from October 08

  1. 1
    FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials The Hacker News
  2. 2
    Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details The Hacker News
  3. 3
    SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances The Hacker News
  4. 4
    Hackers hijack Google domains after breaching ccTLD registries BleepingComputer
  5. 5
    ShinyHunters Extorted Boeing Spin-off Prior to Arrests Krebs on Security
  6. 6
    Senate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach The Record
  7. 7
    US posts $10 million reward for accused Chinese ‘Hafnium’ hacker The Record
  8. 8
    100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer The Hacker News
  9. 10
    Chrome 155 Update Patches 247 Vulnerabilities SecurityWeek