Malware
Graphalgo
- First Reported
- Sep 22, 2026
- Latest Reported
- Oct 21, 2026
Reported Context (2)
- Aikido security researcher Oliver Smith wrote in a September post that the malware overlaps with the Graphalgo npm campaign that ReversingLabs researchers first reported in February. Graphalgo Campaign Expands to Terraform Providers and Go Modules
- The malware overlaps with the Graphalgo NPM malware campaign, first reported by ReversingLabs in February 2026, and also reported on in the last week by Safedep, CheckMarx, and JFrog. The malware is a Go port of the Graphalgo Malware Targets Go Modules and Terraform Providers
People (1)
MITRE ATT&CK (13)
Vendors (2)
Products (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.