Cyber Intelligence

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

Medium Severity Global
Date Occurred Jul 14, 2026 07:08 UTC
Event Type Cyber Intelligence
Source TheHackerNews
Recorded Jul 14, 2026
Full Description

A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from 

Event Metadata
  • ID #15667
  • Type Cyber Intelligence
  • Region Global
  • Severity Medium
  • Indexed Jul 14, 2026