Plain-crypto-js Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
March 31, 2026
Last Seen
June 3, 2026

Plain-crypto-js is a malware family tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed March 31, 2026; most recent activity June 3, 2026.

Related Threat Clusters

  • Microsoft Alerts on npm Malware Targeting Cryptocurrency Wallets

    Microsoft's Threat Intelligence unit has issued a warning about a cyber campaign targeting cryptocurrency investors and software developers through compromised npm packages. The malware, embedded in two specific…

    3 articles · Updated June 3, 2026
  • Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

    A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…

    690 articles · Updated April 29, 2026

Recent Intelligence Reports

  • Crypto News Today: Microsoft Warns Crypto Investors as npm Malware Targets Wallets — Analyticsinsight · June 3, 2026
  • Supply chain attack on Axios npm package: Scope, impact, and remediations — Tenable · March 31, 2026

CVSS v3.1 Breakdown