Malware
plain-crypto-js
- First Reported
- Mar 31, 2026
- Latest Reported
- Jun 8, 2026
Reported Context (2)
- Rather than modifying the package code, the attacker injected a malicious transitive dependency, plain-crypto-js. This technique bypasses direct dependency auditing entirely. The malware deployed cross-platform Supply-Chain Malware Campaigns Target Developers and CI Systems in 2026
- that compromised the popular axios HTTP client library by injecting a malicious dependency called plain-crypto-js. This campaign demonstrates advanced tradecraft including multi-stage payloads, platform-specific Analysis Details Malicious npm Dependency Added to Axios Releases
Malware (6)
People (1)
Threat Actors (2)
MITRE ATT&CK (24)
Vendors (6)
Products (9)
Tools (5)
Industries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.