Back Gbhackers

Malicious ‘duer-js’ NPM Package Distributes ‘Bada Stealer’ Malware Targeting Windows and Discord Users

Gbhackers •Mayura Kathir • February 12, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious 'duer-js' NPM Package Distributes 'Bada Stealer' Malware A malicious NPM package named 'duer-js' has been identified, distributing 'Bada Stealer' malware. This package, published by 'luizaearlyx', poses risks to Windows and Discord users, despite only 528 downloads. Security experts are warning developers about its sophisticated attack methods. 3 sources 35

Extracted Entities

Malicious ‘duer-js’ NPM Package Distributes ‘Bada Stealer’ Malware Targeting Windows and Discord Users

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (2)

Tools (1)