Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Medium Severity
Global
Date OccurredJun 29, 202605:36 UTC
Event TypeCyber Intelligence
SourceTheHackerNews
RecordedJun 29, 2026
Full Description
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS