Strapi — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• 36 Malicious Strapi npm Packages Deliver Redis RCE and C2 Malware

  A coordinated supply chain attack has been discovered involving 36 malicious npm packages that impersonate Strapi CMS plugins. These packages were published to the npm registry and are designed to exploit Redis for…

  2 articles · Updated April 6, 2026
• Malicious npm Packages Exploit Strapi CMS, Compromise Credentials

  Researchers from SafeDep have identified 36 malicious npm packages disguised as Strapi CMS plugins, which facilitate Redis and PostgreSQL exploitation, reverse shell injections, and credential harvesting. These packages…

  2 articles · Updated April 6, 2026

Recent Intelligence Reports

• Extensive compromise facilitated by dozens of illicit npm packages | brief — Scworld · April 6, 2026
• 36 Malicious npm Strapi Packages Used to Deploy Redis RCE and Persistent C2 Malware — Cybersecuritynews · April 6, 2026

Related Entities