Minirat malware deployed via NPM targeting macOS machines

Minirat is a malware strain reportedly deployed via the NPM package ecosystem targeting macOS machines. The information originates from a Reddit post in the Malware subreddit, referencing an external source that discusses a compromised NPM package named Velora Dex SDK used to distribute this remote access trojan (RAT). There is minimal discussion and no confirmed exploits in the wild at this time. No specific affected versions or detailed technical indicators are provided. The severity is assessed as medium based on the available data.

• safedep.io/malicious-velora-dex-sdk-npm-compromised-rat/ (opens in a new tab)
• reddit.com/r/Malware/comments/1syz6ch/minirat_malware_deployed_via_npm_targeting_macos/ (opens in a new tab)

• Vivisection of Hermes: An Active Russian-Market Malware-as-a-Service Platform and Its PyMapper Distribution ChainMalware2026-10-25
• Technology that blocks DGA domains | Kaspersky official blogAnalysis2026-10-23
• Infostealer riding the AI TrainMalware2026-10-23
• LiteLLM release pipeline hacked to distribute info-stealer malwareMalware2026-10-22
• Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affectedBreach2026-10-21