Picture

npm malware @npm_malware

📣 We tweet malicious packages detected on npm in real-time. 🚨 Not affiliated with @npmjs or @github. 🛡 Powered by the @SocketSecurity threat feed. ✨ socket.dev Joined August 2022
  • Tweets
    7K
  • Followers
    2K
  • Following
    13
  • Likes
    25
npm_malware Profile Picture

npm malware @npm_malware

a hour ago

⚠️ New threat detected: [email protected] ⚠️ This code performs unauthorized data exfiltration of sensitive system and environment information to a suspicious remote server, constituting malicious behavior and a serious privacy violation. It should ... socket.dev/npm/package/vu…

npm_malware Profile Picture

npm malware @npm_malware

13 hours ago

⚠️ New threat detected: [email protected] ⚠️ This file creates a persistent reverse shell connection to example[.]com on port 43197, allowing remote command execution and potential data exfiltration. The connection is automatically reestablis... socket.dev/npm/package/pe…

npm_malware Profile Picture

npm malware @npm_malware

14 hours ago

⚠️ New threat detected: [email protected] ⚠️ The code is a clear security threat exhibiting malicious behavior: it exfiltrates sensitive environment variables to a suspicious external server and executes arbitrary code received from that server... socket.dev/npm/package/ta…

npm_malware Profile Picture

npm malware @npm_malware

2 days ago

⚠️ New threat detected: @​bgrc/[email protected] ⚠️ This code performs covert data exfiltration by collecting sensitive local system identifiers (username and hostname) and transmitting them to a hardcoded external domain (1df4dxakhxa1jwq0fu6auadcf3... socket.dev/npm/package/@b…

npm_malware Profile Picture

npm malware @npm_malware

2 days ago

⚠️ New threat detected: [email protected] ⚠️ This file implements a covert data-theft payload: it gathers hostname (os.hostname()), username (os.userInfo().username), current working directory (process.cwd()), and all environment variables (pro... socket.dev/npm/package/bl…

npm_malware Profile Picture

npm malware @npm_malware

3 days ago

⚠️ New threat detected: [email protected] ⚠️ The code dynamically loads and executes a remote script from a suspicious external domain, which poses a high security risk including potential malware execution or data theft. The behavior is typical of malici... socket.dev/npm/package/hj…

npm_malware Profile Picture

npm malware @npm_malware

3 days ago

⚠️ New threat detected: @​nelio-content/[email protected] ⚠️ This code performs unauthorized data exfiltration of sensitive system and environment information to a suspicious remote server, constituting malicious behavior and a serious privacy violatio... socket.dev/npm/package/@n…

npm_malware Profile Picture

npm malware @npm_malware

3 days ago

⚠️ New threat detected: [email protected] ⚠️ The source code contains a high-risk malicious backdoor that executes a reverse shell by downloading and running a remote script. This poses a critical security threat allowing full remote compromise ... socket.dev/npm/package/in…

npm_malware Profile Picture

npm malware @npm_malware

3 days ago

⚠️ New threat detected: [email protected] ⚠️ The flagged file (`src/index.js`) executes an external shell script (`att[.]sh`) via child_process.exec immediately on module load and again inside its Create() method without any validation or error handling. ... socket.dev/npm/package/ao…

npm_malware Profile Picture

npm malware @npm_malware

3 days ago

⚠️ New threat detected: [email protected] ⚠️ The source code implements a hidden data exfiltration mechanism that collects sensitive system and package information and sends it to an external server without user consent. This behavior is malicious ... socket.dev/npm/package/nu…

npm_malware Profile Picture

npm malware @npm_malware

4 days ago

⚠️ New threat detected: [email protected] ⚠️ This code is performing intentional credential harvesting. This is well documented in the readme as the code's intended purpose. it spawns an Electron browser, waits for the user to authenticate to claude... socket.dev/npm/package/ca…

npm_malware Profile Picture

npm malware @npm_malware

4 days ago

⚠️ New threat detected: [email protected] ⚠️ Code exhibits suspicious behavior through detached process spawning and dynamic code execution via eval(). The spawned process runs independently and could persist after parent exits. While the eval'd cod... socket.dev/npm/package/fu…

npm_malware Profile Picture

npm malware @npm_malware

4 days ago

⚠️ New threat detected: [email protected] ⚠️ This code is performing intentional credential harvesting. This is well documented in the readme as the code's intended purpose. it spawns an Electron browser, waits for the user to authenticate to claude... socket.dev/npm/package/ca…

npm_malware Profile Picture

npm malware @npm_malware

4 days ago

⚠️ New threat detected: @​superbet-group/[email protected] ⚠️ This code spawns a shell on the host system and connects to 207[.]154[.]222[.]173 on port 4444, enabling remote command execution and posing a serious security risk. socket.dev/npm/package/@s…

npm_malware Profile Picture

npm malware @npm_malware

4 days ago

⚠️ New threat detected: @​superbet-group/[email protected] ⚠️ This code spawns a shell on the host system and connects to 207[.]154[.]222[.]173 on port 4444, enabling remote command execution and posing a serious security risk. socket.dev/npm/package/@s…

npm_malware Profile Picture

npm malware @npm_malware

4 days ago

⚠️ New threat detected: [email protected] ⚠️ The code dynamically loads and executes a remote script from a suspicious external domain, which poses a high security risk including potential malware execution or data theft. The behavior is typical of malici... socket.dev/npm/package/hj…

npm_malware Profile Picture

npm malware @npm_malware

5 days ago

⚠️ New threat detected: @​opengis/[email protected] ⚠️ This code contains a dangerous, likely-malicious or at least negligent behavior: it persistently sets the admin account's password to a hardcoded value ('6Z4gu2mG8R') whenever someone authenti... socket.dev/npm/package/@o…

npm_malware Profile Picture

npm malware @npm_malware

5 days ago

⚠️ New threat detected: [email protected] ⚠️ The script seems to be part of a spamming operation and uses bad security practices, such as hardcoding paths and credentials. Therefore, it's a potential security risk. socket.dev/npm/package/wa…

npm_malware Profile Picture

npm malware @npm_malware

5 days ago

⚠️ New threat detected: @​opengis/[email protected] ⚠️ This code contains a dangerous, likely-malicious or at least negligent behavior: it persistently sets the admin account's password to a hardcoded value ('6Z4gu2mG8R') whenever someone authentic... socket.dev/npm/package/@o…

npm_malware Profile Picture

npm malware @npm_malware

6 days ago

⚠️ New threat detected: [email protected] ⚠️ This code is a runtime interceptor that hijacks the Claude CLI's authentication flow: it fabricates local credentials, fetches an OAuth-style token from a remote SERVICE_BASE, injects that token into r... socket.dev/npm/package/cl…

Trends for United States

Nicki
223 B posts
Druski
12,7 B posts
Bengals
51,8 B posts
Latto
22,4 B posts
Kevin Hart
8.416 posts
Jets
87,7 B posts
#DoubleUp
Barney B
17,6 B posts
Zac Taylor
7.252 posts
Cocaine Barbie
27,1 B posts
Tyreek
45,2 B posts
Broncos
41,3 B posts
Jake Browning
4.989 posts
#PokemonTCGPocket
1.861 posts
Burrow
12,4 B posts
Justin Fields
11,6 B posts
Ray J
3.212 posts
Gumi
10,2 B posts
Papa Bear
7.026 posts
Bo Nix
6.992 posts

You might like

https://t.co/9qhgzJ69UQ
Elon Musk
@elonmusk
226.9M Followers
Dad, husband, President, citizen.
Barack Obama
@BarackObama
130.0M Followers
Welcome to the official account of Cristiano Ronaldo.
Cristiano Ronaldo
@Cristiano
115.2M Followers
45th & 47th President of the United States of America🇺🇸
Donald J. Trump
@realDonaldTrump
109.5M Followers
@skylrk
Justin Bieber
@justinbieber
107.8M Followers
Rihanna
@rihanna
106.9M Followers
And, baby, that’s show business for you. New album The Life of a Showgirl. Out October 3 ❤️‍🔥
Taylor Swift
@taylorswift13
92.9M Followers
Official NASA account. Exploring the universe, advancing science, and inspiring the next generation of explorers. Verification: https://t.co/8nok3NP4PW
NASA
@NASA
88.0M Followers
MAYHEM, INCLUDING “THE DEAD DANCE”, OUT NOW
Lady Gaga
@ladygaga
81.0M Followers
football is so back
YouTube
@YouTube
78.4M Followers
@SKIMS
Kim Kardashian
@KimKardashian
74.0M Followers
Comedian, talk show host and ice road trucker. My tweets are real, and they’re spectacular.
The Ellen Show
@EllenDeGeneres
73.2M Followers
what's happening?!
X
@X
68.4M Followers
A proud husband and father ❤️
Virat Kohli
@imVkohli
67.8M Followers
Sharing things I'm learning through my foundation work and other interests.
Bill Gates
@BillGates
66.3M Followers
“I Said I Love You First…And You Said It Back” Out Now🖤
Selena Gomez
@selenagomez
64.5M Followers
Breaking news from CNN Digital. Check @cnn for all things CNN, breaking and more.
CNN Breaking News
@cnnbrk
63.6M Followers
It’s our job to #GoThere and tell the most difficult stories. For breaking news, follow @CNNBRK and download the CNN app ➡️ https://t.co/7PQD7o6fLw
CNN
@CNN
63.6M Followers
Filho de Deus, Pai, Feliz e Ousado !
Neymar Jr
@neymarjr
63.6M Followers
Office of the Prime Minister of India
PMO India
@PMOIndia
59.1M Followers