Frequency
2
occurrences
First Seen
January 27, 2026
Last Seen
January 27, 2026
Related Threat Clusters
-
G_Wagon npm Package Steals Browser Credentials via Obfuscated Payload
On January 23, 2026, security researchers identified an npm package named ansi-universal-ui, which masqueraded as a legitimate UI component library. This package contained G_Wagon, a sophisticated multi-stage…
2 articles · Updated January 27, 2026
Recent Intelligence Reports
- G_Wagon npm Package Attacking Users to Exfiltrates Browser Credentials using Obfuscated Payload — Cybersecuritynews · January 27, 2026
- G_Wagon NPM Package Exploits Users to Steal Browser Credentials with Obfuscated Payload — Gbhackers · January 27, 2026