ThreatCluster

Malicious npm Package with 206K Downloads Targets GitHub Repositories

First seen 2 Dec 2025, 18:33 UTC •GbhackersCyberpressCybersecuritynews •8

Article Content

Browse articles
ThreatCluster

A malicious npm package, which has been downloaded over 206,000 times, has been identified as targeting GitHub repositories to steal sensitive tokens. This attack exploits vulnerabilities in the npm ecosystem, affecting developers and their projects by compromising access tokens stored in configuration files.

How this analysis works

Extracted Entities

1 / 2