Self-Replicating Malware Targets NPM Ecosystem and Cloud Credentials

First seen 1 Dec 2025, 15:41 UTC • Morphisec

•33

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A self-replicating malware campaign is compromising the NPM ecosystem, capable of stealing credentials and secrets from major cloud platforms like AWS, Google Cloud Platform, and Azure. Experts believe this threat is not receiving adequate attention despite its significant risks.

How this analysis works

Attack Flow

Continue Reading

Gamaredon Exploits WinRAR Vulnerability in Ongoing Ukraine Campaign Malware Spread via Fake Polymarket Trading Bot Targets DeFi Developers Red Menshen APT Uses BPFdoor for Long-Term Espionage in Telecom Networks APT41 Exploits Cloud Services with New Zero-Detection ELF Backdoor Google and FBI Disrupt NetNut Proxy Network Linked to 2 Million Devices Drone Strikes Disrupt AWS Infrastructure, Trigger Cybersecurity Crisis for MSPs

Self-Replicating Malware Targets NPM Ecosystem and Cloud Credentials

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading