Hackers Impersonated Jackson JSON Library to Infiltrate Maven Central

Gbhackers • December 30, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malware Campaign Targets Maven Central via Jackson JSON Library Impersonation A malware campaign has infiltrated Maven Central by impersonating a legitimate Jackson JSON library extension. The malicious package was published under the org.fasterxml.jackson.core/jackson-databind namespace, marking a significant instance of a typosquatting attack on this trusted repository for Java developers. 2 sources 31

Extracted Entities

Hackers Impersonated Jackson JSON Library to Infiltrate Maven Central

The full story

Extracted Entities

Attack Types (2)

Platforms (1)

Tools (1)