---
id: 6696
title: "8 Malicious npm Packages Deliver Multi-Layered Chrome Browser Information Stealer"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/malicious-npm-packages-chrome-browser-information-stealer/"
published_at: "2025-08-27T15:26:54Z"
tags: ["supply-chain", "npm", "obfuscation", "jfrog", "infostealer", "malicious-packages"]
phying_url: "https://phying.com/item/6696"
lang: en
---

# 8 Malicious npm Packages Deliver Multi-Layered Chrome Browser Information Stealer

## Summary

JFrog uncovers 8 malicious npm packages (react-sxt, react-sdk-solana and more) chaining obfuscated JavaScript and Python to deploy a multilayer Chrome information stealer on Windows.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2025-08-27T15:26:54Z
- **Original:** https://jfrog.com/blog/malicious-npm-packages-chrome-browser-information-stealer/
- **Phying News:** https://phying.com/item/6696