The local-commander-agent npm package version 0.3.52 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted computer. Removing the package alone does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
North Korean threat actors, identified as the Lazarus Group, conduct cryptocurrency thefts by initially compromising developers through social engineering on the open internet. They trick developers into running malicious projects, which leads to planting malware in cryptocurrency wallet interfaces, as seen in the February 2025 Bybit theft and a similar Binance compromise. These operations use pre-registered domains and US-registered front companies to deliver malware, including through fake job interviews. Preemptive defenses have identified numerous malicious domains mimicking Binance, enabling defenders to block infrastructure before attacks occur.
A malicious version of the Claude Code extension (versions 2.1.312 and 2.1.313) was distributed via the Cursor extension marketplace on October 29, 2026. This compromised extension injected JavaScript that executed during module loading to establish a persistent SSH backdoor. It collected host reconnaissance data, installed an attacker-controlled SSH key, enabled local SSH services, and created reverse SSH tunnels to attacker infrastructure. Persistence was maintained through platform-specific mechanisms such as macOS LaunchAgents, Linux cron jobs, and Windows scheduled tasks. The attack used built-in system tools to evade detection. Microsoft confirmed the malicious packages were not distributed through Visual Studio Marketplace or npm, and Anthropic's systems were not compromised. The incident appears limited to the Cursor marketplace.
A malicious version of the Claude Code extension (versions 2.1.312 and 2.1.313) was briefly available on the Cursor marketplace, embedding a JavaScript loader that attempts to establish persistent SSH backdoor access. The loader collects host information, adds an attacker-controlled SSH public key to authorized_keys, enables the local SSH service, creates a reverse SSH tunnel, configures persistence mechanisms, and attempts to exfiltrate host details. The incident is limited to the Cursor marketplace; official Microsoft Visual Studio Marketplace and npm packages were not affected. Successful remote access depends on host privileges and SSH configuration. Organizations should identify affected systems, preserve evidence, remove malicious artifacts, and rotate credentials if exposure is suspected.
The npm package vas-tops2-reportingui contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removing the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The npm package vas-tops2-core-clients-search contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control.
The npm package vas-tops2-core-client-cleanup-ui contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, uncompromised device. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package @tops2/digital-assistant-ui contains malicious code that compromises any computer on which it is installed or running. The presence of this package indicates a full system compromise, and all secrets and keys stored on the affected machine should be rotated immediately from a different, secure computer. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package vas-tops2-digital-assistant-ui contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, clean computer. Removal of the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control over the system.
The npm package vas-tops2-core-property-search contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removal of the package alone does not guarantee elimination of all malicious software introduced by this package.
The npm package vas-tops2-bidmatrix-ui contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a separate, uncompromised machine. Removing the package alone may not eliminate all malicious software introduced by its installation.
The tefeest-npm-com-test package contains malicious code that can fully compromise any computer on which it is installed or running. It is advised to immediately rotate all secrets and keys from a different, uncompromised machine. Removing the package alone may not eliminate all malicious software introduced by it.
The neuralwhatsapp npm package contains malicious code that compromises any computer on which it is installed or running. Installation of this package results in a full system compromise, potentially exposing all stored secrets and keys. Immediate removal of the package is advised, but full remediation may require rotating all secrets from a separate, uncompromised system due to the risk of persistent malicious software.
Two human-operated intrusions used Microsoft Teams to impersonate IT staff and socially engineer users into granting remote access via Quick Assist. Attackers deployed portable runtimes to perform network discovery and assessed Active Directory Certificate Services (AD CS) for authentication exploitation. One intrusion exploited an ESC1-vulnerable certificate template to obtain privileged authentication certificates and performed DCSync operations. The other used PetitPotam to coerce domain-controller authentication and relayed it via ESC8 to AD CS Web Enrollment, obtaining a domain-controller certificate for Kerberos authentication. Automated defenses limited the first intrusion except for an excluded privileged identity that enabled data exfiltration, while customer-led isolation stopped the second intrusion after Defender alerts.
The npm package 'ourin-baileys' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removing the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control over the system.
The apex-fetch npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Simply removing the package does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
The grizzly-baileys npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control.
The npm package 'tabby-fknat' version 0.1.2 contains malicious code that can fully compromise any computer on which it is installed or running. This compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is advised, but due to the extent of the compromise, complete remediation may require rotating all secrets and keys from a different, trusted machine.
In late May 2026, Belarus-aligned threat actors known as FrostyNeighbor deployed a VBScript wiper malware against a Ukrainian manufacturing company in the transportation sector. This represents the first documented destructive cyberattack by a Belarus-aligned group, marking a shift from espionage to destructive operations. The attackers used tools including Chisel, UltraVNC, and Cobalt Strike, delivering the destructive payload via Group Policy. The targeting of a transportation-related company suggests potential wartime operational objectives. Researchers note increasing aggression from Belarus-aligned groups, possibly acting as proxies for Russian intelligence, though direct cooperation is unconfirmed.
The npm package @nexlayerlabs/postcss-keyframe-utils contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removal of the package alone does not guarantee elimination of the malicious software or attacker control.
