ThreatCluster

Malware Campaign Targets Maven Central via Jackson JSON Library Impersonation

First seen 30 Dec 2025, 19:25 UTC •GbhackersCybersecuritynews •31

Article Content

Browse articles
ThreatCluster

A malware campaign has infiltrated Maven Central by impersonating a legitimate Jackson JSON library extension. The malicious package was published under the org.fasterxml.jackson.core/jackson-databind namespace, marking a significant instance of a typosquatting attack on this trusted repository for Java developers.

How this analysis works

Extracted Entities

1 / 2