Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Home / Tech / Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

June 29, 2026 dirk 0 Comments 3 tags

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts.

“This attack avoids the most common npm execution paths through lifecycle scripts, perhaps in an attempt to remain ‘compatible’ with npm v12’s security hardenings,” JFrog said in a

Source: The Hacker News

Explore More

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been

Demis Hassabis has a plan to harness AI safely

Demis Hassabis has a plan to harness AI safely Source: Hacker News

After Losses, Retail Investors Flock to 3x Leverage as 2x Product Are Restricted

After Losses, Retail Investors Flock to 3x Leverage as 2x Product Are Restricted Source: Hacker News