Malicious npm Packages Target Developer Credentials Across Multiple Operating Systems

Malicious npm Packages Target Developer Credentials Across Multiple Operating Systems

First seen 2 Nov 2025, 16:14 UTC •ThehackernewsTechradar •19.1

Article Content

Browse articles
ThreatCluster

A series of malicious npm packages have been identified that target developer credentials on Windows, macOS, and Linux systems. These packages exploit system keyrings and bypass application-level security to steal decrypted credentials. Affected users are advised to revoke their credentials and rebuild their environments to mitigate the impact.

How this analysis works

Extracted Entities

1 / 2