#2
The Hacker News
general
April 05, 2026 at 05:07 UTC
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
By [email protected] (The Hacker News)
AI Summary
Researchers discovered 36 malicious npm packages disguised as Strapi CMS plugins that exploit Redis and PostgreSQL databases, deploy reverse shells, harvest credentials, and install persistent implants. Each package contains three files (package.json, index.js, postinstall.js) with no description or repository information, targeting developers through supply chain attacks. This highlights the ongoing threat to JavaScript development environments through compromised package repositories.
Relevance score: 92.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →