Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

malware

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

A long-running NPM supply chain campaign, dubbed MALFEX, has been distributing malicious packages – including the Overlord RAT and infostealers – for over a year. The campaign primarily affects users who install the pack…

SecurityWeek · 4d ago Medium

npm malware supply chain

malware

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Researchers have identified a long-running npm supply chain attack, codenamed MALFEX, orchestrated by a lone threat actor.

The Hacker News · 2d ago CriticalCVSS 9.8KEVEPSS 10%

CVE-2026-63030 CVE-2026-60137 BR npm malware supply-chain

news.mlab.sh

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer