Product
NPM registry
- First Reported
- Aug 6, 2026
- Latest Reported
- Aug 6, 2026
Reported Context (1)
- Over the course of 48 hours a threat actor has published more than 700 malicious packages to the NPM registry. These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all NPM Campaign Uses 700+ Malicious Packages to Deliver Cross-Platform Malware
MITRE ATT&CK (7)
Products (2)
Tools (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.