148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

Home / Tech / 148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

July 14, 2026 dirk 0 Comments 3 tags

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

A campaign of 148 npm packages disguised as student web proxies turned visitors’ browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from JFrog.

The packages did not go after the developers who might install them. The operators used the registry as free hosting for a booby-trapped proxy site and let the students who came to dodge

Source: The Hacker News

Explore More

Why Post-Quantum Cryptography Starts With Credentials

Why Post-Quantum Cryptography Starts With Credentials Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon be broken

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials Convince an AI browser that it is playing a game, and it can hand over your login details. That is

Show HN: Weedout – Safari extension that hides YouTube AI-labeled videos

Show HN: Weedout – Safari extension that hides YouTube AI-labeled videos Source: Hacker News