148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
Medium Severity
Global
Date OccurredJul 14, 202607:08 UTC
Event TypeCyber Intelligence
SourceTheHackerNews
RecordedJul 14, 2026
Full Description
A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from