Back Cybersecuritynews

Sophisticated ‘duer-js’ NPM Package Distributes ‘Bada Stealer’ Malware Targeting Windows and Discord Users

Cybersecuritynews •Tushar Subhra Dutta • February 12, 2026

A dangerous malware campaign has emerged on the NPM package registry, putting thousands of developers and Windows users at risk. The malicious package, known as “duer-js,” was published by a user named “luizaearlyx” and disguised itself as a legitimate console visibility tool. Despite having only 528 downloads, security experts warn that its sophisticated attack methods […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious 'duer-js' NPM Package Distributes 'Bada Stealer' Malware A malicious NPM package named 'duer-js' has been identified, distributing 'Bada Stealer' malware. This package, published by 'luizaearlyx', poses risks to Windows and Discord users, despite only 528 downloads. Security experts are warning developers about its sophisticated attack methods. 3 sources 35

Extracted Entities

Sophisticated ‘duer-js’ NPM Package Distributes ‘Bada Stealer’ Malware Targeting Windows and Discord Users

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (2)

Platforms (2)

Tools (1)