Back Thehackernews

Seven npm Packages Use Adspect Cloaking to Trick Victims Into Crypto Scam Pages

Thehackernews • November 18, 2025

The malicious npm packages, published by a threat actor named "dino_reborn" between September and November 2025, are listed below. The npm account ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious npm Packages Use Adspect Cloaking in Crypto Scam A malware campaign has been identified that utilizes malicious npm packages to create fake websites designed to identify and exploit potential victims. The threat actor, known as 'dino_reborn', published these packages between September and November 2025, targeting users in the cryptocurrency space. 12 sources 24

Extracted Entities

Tools (2)

Adspect Cloaking Npm