New "duer-js" NPM Package Delivers Bada Stealer Malware to Windows and Discord Users

Back Cyberpress

New "duer-js" NPM Package Delivers Bada Stealer Malware to Windows and Discord Users

Cyberpress • February 13, 2026

Share: View original

A malicious NPM package called "duer-js," published by user "luizaearlyx." This package deploys "Bada Stealer,".

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious 'duer-js' NPM Package Distributes 'Bada Stealer' Malware A malicious NPM package named 'duer-js' has been identified, distributing 'Bada Stealer' malware. This package, published by 'luizaearlyx', poses risks to Windows and Discord users, despite only 528 downloads. Security experts are warning developers about its sophisticated attack methods. 3 sources 35

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (2)

Discord Windows