Cyber Intelligence

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Medium Severity Global
Date Occurred Jun 29, 2026 05:36 UTC
Event Type Cyber Intelligence
Source TheHackerNews
Recorded Jun 29, 2026
Full Description

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS

Event Metadata
  • ID #12044
  • Type Cyber Intelligence
  • Region Global
  • Severity Medium
  • Indexed Jun 29, 2026