Researchers uncovered 800 malicious packages in the npm registry delivering a cross-platform remote access trojan (RAT) and infostealer. The campaign uses AI-generated typosquatting and randomly squatted package names to evade detection across Windows, Mac, and Linux systems.

OpenSourceMalware researcher Paul identified the cluster as part of a coordinated attack leveraging the JavaScript ecosystem. The packages employ obfuscated payloads designed to establish persistent access and exfiltrate sensitive data from compromised machines.

This attack exploits a persistent vulnerability in npm's security model. Developers frequently mistype package names during installation, and attackers systematically register similar names to capture accidental downloads. The use of AI-generated naming patterns increases scale dramatically, making manual detection harder for registry moderators.

The RAT component grants attackers command execution capabilities, allowing them to download additional malware, steal credentials, and pivot within networks. The infostealer harvests browser data, system information, and cached authentication tokens from infected systems.

JavaScript dependency chains create particular risk. A single compromised package can reach hundreds of downstream projects. This campaign's size suggests attackers uploaded packages gradually to avoid triggering automated detection thresholds.

Organizations using npm must implement strict dependency auditing. The npm audit command identifies known vulnerabilities, but new malicious packages bypass this. Teams should verify package authenticity through GitHub repositories, check maintainer reputation, and monitor installation logs for unusual activity.

Individual developers face direct risk from typosquatting. Double-checking package names before installation remains the primary defense. Using lock files pins dependency versions and prevents automatic updates to compromised packages.

npm has likely removed the malicious packages, but the scale indicates gaps in automated malware detection. The campaign demonstrates how typosquatting persists despite years of security research. Supply chain attacks targeting developer tools remain among