Malware Package

Identified Reports (2)

This malware package was identified on the following reports.

Report	URL	Published At	Author	Description
Targeted npm Malware Attempts to Steal Company Source Code and Secrets	https://blog.phylum.io/targeted-npm-malware-attempts-to-steal-developers-source-code-and-secrets	1691038800000	Phylum Research Team	On July 31, 2023, Phylum's automated risk detection platform alerted us to another series of unusual publications on npm. Within a few hours, we observed the publication of ten different "test" packages. These packages demonstrated increasing functionality and refinement as the attacker seemingly tailored the code for a specific purpose—
Targeted npm Malware Attempts to Steal Company Source Code and Secrets	https://blog.phylum.io/targeted-npm-malware-attempts-to-steal-developers-source-code-and-secrets/?ref=software-supply-chain-attack-research-newsletter	1691038800000	Phylum Research Team	This appears to be a slow, on-going attack. Since our initial report, two more packages have been identified as part of this campaign: ng-zulutrade-ssr and binarium-crm. We will provide periodic updates as we identify further publications associated with this campaign.
Report	External URL	Published At	Author	Description

Related Malware Packages (17)

The following malware packages were identified in the same report as this one.

Package Type	Name	Attack Strategy	Package Author	Versions
NPM Module	@rocketrefer/admin-panel		malikrukd4732	2.9.9
NPM Module	@rocketrefer/components		malikrukd4732	1.21.5
NPM Module	binarium-client		malikrukd4732	4.0.0
NPM Module	binarium-crm		malikrukd4732	1.9.9
NPM Module	casino.web		malikrukd4732	1.0.0, 1.0.4, 1.1.2
NPM Module	developer_backup_test521		malikrukd4732	1.999.0
NPM Module	developer_backup_test522		malikrukd4732	1.999.0
NPM Module	developer_backup_test524		malikrukd4732	2.999.0
NPM Module	developer_backup_test525		malikrukd4732	1.999.0
NPM Module	developer_backup_test527		malikrukd4732	1.999.0
NPM Module	developer_backup_test528		malikrukd4732	1.999.0
NPM Module	developer_backup_test529		malikrukd4732	1.999.0
NPM Module	developer_backup_test531		malikrukd4732	1.999.0, 1.999.9, 9.999.0
NPM Module	developer_backup_test532		malikrukd4732	1.999.9
NPM Module	docs-public-api		malikrukd4732
NPM Module	ng-zulutrade-ssr		malikrukd4732	4.0.0
NPM Module	zip_achive_bp		malikrukd4732	1.999.0