Over 15 Malicious npm Packages Delivering Vidar Malware on Windows Systems

First seen 7 Nov 2025, 12:54 UTC • Gbhackers

•56

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

More than 15 weaponized npm packages have been identified that exploit Windows systems to deploy Vidar malware. These malicious packages target users by masquerading as legitimate software, potentially compromising sensitive data. The ongoing threat affects a wide range of Windows users and organizations relying on npm for package management.

How this analysis works

Attack Flow

Continue Reading

GhostShell Malware Targets Ukraine's UAV and Defense Supply Chain Operation Endgame Disrupts Evil Corp's SocGholish Malware Network Russian Cyber Espionage Clusters Exploit OAuth and Phishing Techniques Torg Grabber Malware Targets 728 Crypto Wallets with Advanced Techniques SparkKitty Malware Targets Crypto Users via App Stores and Photo Galleries Chronus Group Breach Exposes 36 Million Mexican Citizens' Data

Over 15 Malicious npm Packages Delivering Vidar Malware on Windows Systems

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading