New npm Malware Campaign Checks If Visitor Is a Victim or Researcher Before Initiating Infection

Gbhackers •Mayura Kathir • November 19, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New npm Malware Campaign Targets Visitors Based on Their Role A new malware campaign targeting npm users has been identified, which checks if a visitor is a victim or a researcher before initiating the infection process. This sophisticated approach aims to maximize the effectiveness of the attack while minimizing exposure to security researchers. The campaign highlights the evolving tactics used by cybercriminals in the npm ecosystem. 2 sources 31

Extracted Entities

New npm Malware Campaign Checks If Visitor Is a Victim or Researcher Before Initiating Infection

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Tools (1)