Over 15 Malicious npm Packages Deliver Vidar Malware on Windows Systems
Article Content
Browse articles 
More than 15 malicious npm packages have been identified that exploit Windows systems to deploy Vidar malware. These packages masquerade as legitimate software, targeting users and potentially compromising sensitive data. The threat affects a wide range of Windows users and organizations that utilize npm for package management.
Ask AI about this cluster
Answers cite the sources they use
Updated 213d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Vidar in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
2CLoader Malware Loader Distributes Vidar and Remus Infostealers Zscaler ThreatLabz has identified a new malware loader named 2CLoader, which is used to deliver infostealers Vidar and Remus, as well as XWorm RAT. The loader employs advanced evasion techniques to bypass security measures, including indirect system calls and anti-debugging checks. Organizations are advised to enhance… 
Warden Stealer Malware Targets AI Agents for Data Theft Warden Stealer, a sophisticated malware-as-a-service, is actively targeting AI agents like Claude, Codex, Grok, and Cursor to steal sensitive developer data. This Rust-based infostealer collects configuration files, tokens, and conversation histories, posing a significant threat to organizations using AI tools. The…