Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware
Medium Severity
Global
Date OccurredMay 18, 202608:57 UTC
Event TypeCyber Intelligence
SourceTheHackerNews
RecordedMay 18, 2026
Full Description
Cybersecurity researchers have discovered four new npm packages containing information-stealing malware, one of which is a clone of the Shai-Hulud worm open-sourced by TeamPCP.
The list of identified