14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence (AI)-powered Linux implant dubbed RedC2 4.0.

“When the module loads, it locates the bundled binary, marks it executable, and launches it as a detached background process,” TrendAI, Trend Micro’s

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family

A joke domain purchase turned in geopolitical warfare

A joke domain purchase turned in geopolitical warfare Source: Hacker News

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For