ThreatCluster

New npm Malware Campaign Targets Visitors Based on Their Role

First seen 19 Nov 2025, 13:15 UTC •GbhackersCybersecuritynews •31

Article Content

Browse articles
ThreatCluster

A new malware campaign targeting npm users has been identified, which checks if a visitor is a victim or a researcher before initiating the infection process. This sophisticated approach aims to maximize the effectiveness of the attack while minimizing exposure to security researchers. The campaign highlights the evolving tactics used by cybercriminals in the npm ecosystem.

How this analysis works

Extracted Entities

1 / 2