Maloss

Tool

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 15, 2025

Last Seen

November 15, 2025

API

Maloss is described as a worm-like malware tool that floods the npm registry with packages containing token-stealing payloads, enabling attackers to harvest credentials from developers and automation accounts when those packages are installed.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (2)

Over 150,000 Malicious npm Packages Flood Registry in Token Farming Attack

Nov 15·5 sources

Over 150,000 Malicious npm Packages Linked to Token Farming Campaign Detected

Nov 15·4 sources

Related Entities

Malware Supply Chain Attack IndonesianFoods PyPI Npm Opensourcemalware.com

Maloss

Overview

Recent Events

Profile

Associated Malware

Attack Types

Platforms

Relationships

Related Clusters (2)

Over 150,000 Malicious npm Packages Flood Registry in Token Farming Attack

Over 150,000 Malicious npm Packages Linked to Token Farming Campaign Detected

Related Articles (1)

Worm flooding npm registry with token stealers still isn’t under control

Related Entities