Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

8 Malicious npm Packages Deliver Multi-Layered Chrome Browser Information Stealer

jfrog.com | research | #supply-chain | #npm | #obfuscation | #jfrog | #infostealer | #malicious-packages

Summary

JFrog uncovers 8 malicious npm packages (react-sxt, react-sdk-solana and more) chaining obfuscated JavaScript and Python to deploy a multilayer Chrome information stealer on Windows.
Published
Collected

original ↗

Related coverage

  1. PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting (crowdstrike.com)
  2. Breaking AppSec Myths – Obfuscated Packages (jfrog.com)
  3. From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuse (lab.ctbb.show)
  4. Extending the Single Source of Truth to the Agentic Software Supply Chain (jfrog.com)
  5. Live From the Show Floor: swampUP 2026 (jfrog.com)
  6. DevGovOps: How the AI Era Dictates That Governance Lives inside the Pipeline (jfrog.com)

back