Zapier’s NPM Account Hacked, Packages Infected with Malware
First seen 24 Nov 2025, 13:24 UTC
•
•96% similarity
•24
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Zapier's NPM account was compromised, leading to multiple packages being infected with malware. The incident has raised alarms about the security of third-party packages in the Node.js ecosystem. Users of the affected packages are advised to take immediate action to secure their systems.
ThreatCluster AI
How this analysis works