Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-23 08:54 UTC
Importiert: 2026-06-30 13:59 UTC
Quelle-ID: thn_global
uid_hash: 2d64688daad6db039288962c1c47d4402c71341a2d953b542893bbd2bfc6248f

The Hacker News

Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT).

The list of identified packages, is below -

aes-decode-runner-pro (145 downloads) postcss-minify-selector (256 downloads) postcss-minify-selector-parser (615 downloads)

All the packages were published over the past month by an npm user named

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews