Malware
NodeCordRAT
- First Reported
- Jan 7, 2026
- Latest Reported
- Jan 7, 2026
Reported Context (1)
- which installs bip40, the package that contains the malicious payload. This final payload, named NodeCordRAT by ThreatLabz, is a remote access trojan (RAT) with data-stealing capabilities. It is also possible to Malicious npm Packages Deliver NodeCordRAT, Stealing Credentials and Crypto Data
MITRE ATT&CK (4)
Vendors (1)
Products (3)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.