Aikido.Dev Phishing Campaign Utilizes Malicious npm Packages Targeting Various Sectors
Article Content
Browse articles 
A new phishing campaign has emerged, utilizing malicious npm packages to target employees in industrial, energy, and healthcare sectors across Europe, the Middle East, and the United States. Attackers have published multiple versions of these packages, including flockiali, opresc, prndn, oprnm, and operni, which serve custom credential harvesting pages. This sophisticated approach leverages trusted software repositories to deliver phishing infrastructure.
Ask AI about this cluster
Answers cite the sources they use
Updated 242d ago How this analysis works
More articles in this cluster (4)
Following this threat?
Track Shai-hulud and Amixon in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Cisco Email Bug Exploited as Zero-Day by Unknown Actors A zero-day vulnerability in Cisco's email system has been by unknown criminals. The flaw, described as a 'make-me-root' bug, allows attackers to gain root access via email. Cisco has not disclosed specific details about the vulnerability or the affected systems. The exploit is reportedly being used in the wild… 
Phishing Attacks Exploit Microsoft Teams for Credential Theft In 2026, attackers increasingly impersonated IT support via Microsoft Teams to steal credentials and spread malware. Ontinue's report noted that 30% of monitored organizations experienced such impersonation attempts, with one in every 990 external contacts showing signs of fraud. The Shai-Hulud npm worm was identified…