Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

October 6, 2026 · 10:34 am 2 sources

Image: SecurityWeek

Coverage

Coverage

• Long-Running NPM Malware Campaign Accumulates 40,000 Downloads
  SecurityWeek · October 6, 2026 10:34
  Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign. The post Long-Running NPM Malware Campaign Accumulates 40,000 Downloads appeared first on SecurityWeek .

More coverage

• Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
  The Hacker News · October 7, 2026 17:43
  Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a…