Malware
Stardrop
- First Reported
- Apr 14, 2026
- Latest Reported
- Apr 14, 2026
Reported Context (1)
- "givenchy" and "khosla-vc". The malicious packages pretend to deliver a new AI coding agent named "Stardrop", hence the name of this threat campaign. You can see all the associated threat reports through the Stardrop NPM Campaign Uses More Than 200 Packages to Steal Cloud and AI Credentials
MITRE ATT&CK (4)
Products (2)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.