---
id: 6691
title: "New compromised packages identified in largest npm attack in history"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/new-compromised-packages-in-largest-npm-attack-in-history/"
published_at: "2025-09-09T13:51:23Z"
tags: ["ai-security", "malware", "npm", "phishing", "jfrog", "supply-chain-attack", "cryptocurrency-stealer", "jfrog-com"]
phying_url: "https://phying.com/item/6691"
lang: en
---

# New compromised packages identified in largest npm attack in history

## Summary

Follow-up on the largest npm attack in history: more compromised packages (duckdb, coveops/abi) surface as the phishing campaign's crypto-stealer spreads; only ~$500 stolen, and it is still active.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2025-09-09T13:51:23Z
- **Original:** https://jfrog.com/blog/new-compromised-packages-in-largest-npm-attack-in-history/
- **Phying News:** https://phying.com/item/6691