Malicious 'duer-js' NPM Package Distributes 'Bada Stealer' Malware

Malicious 'duer-js' NPM Package Distributes 'Bada Stealer' Malware

First seen 12 Feb 2026, 21:16 UTC •GbhackersCybersecuritynewsCyberpress •35.0

Article Content

Browse articles
ThreatCluster

A malicious NPM package named 'duer-js' has been identified, distributing 'Bada Stealer' malware. This package, published by 'luizaearlyx', poses risks to Windows and Discord users, despite only 528 downloads. Security experts are warning developers about its sophisticated attack methods.

How this analysis works

Timeline

2026-02-12
Malicious 'duer-js' package discovered on NPM
2026-02-12
Security experts issue warnings about the malware

Extracted Entities

1 / 2