The npm package @kxa/xbails version 0.0.5 is a malicious fork of the Baileys WhatsApp Web library that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. It achieves this by injecting code that issues an authenticated FOLLOW query using the victim's own WhatsApp session. The target channels are obfuscated or dynamically fetched to evade detection. This behavior does not involve credential theft, persistence, or arbitrary code execution.
An alleged leader of the Tren de Aragua transnational criminal organization and developer of the Ploutus ATM malware, Anibal Alexander Canelon Aguirre, was arrested by the FBI. The Ploutus malware was used in ATM jackpotting attacks across 47 US states, DC, and other countries, enabling attackers to dispense cash fraudulently. The malware included anti-analysis features and could self-delete to evade forensic detection. Canelon Aguirre was on the FBI's top 10 most wanted list for cybercrimes and faces charges including bank burglary, fraud, and money laundering conspiracy. To date, 120 individuals have been charged in connection with this conspiracy, with some already sentenced to prison.
Since August 2023, a threat actor has conducted a long-running malware campaign on the NPM registry called MALFEX, publishing eight malicious packages that have accumulated over 40,000 downloads. The campaign distributes malware including the Overlord RAT and various infostealers targeting Windows systems. Some malicious packages remain installable as of October 2026, with one package, function-flag, having over 37,000 downloads and no advisory flags. The malware enables remote control, data theft from browsers, Discord clients, and cryptocurrency wallets. The infection routines are designed to fail silently on non-Windows systems, limiting impact to Windows users who directly install these packages. No geographic or organizational targeting has been observed.
A Russian-speaking affiliate of the Gentlemen ransomware group, known as Azazel, operated a sophisticated ransomware and data exfiltration campaign targeting over two dozen organizations across six countries. Azazel exploited stolen CI/CD secrets, GitLab variable stores, and git history to gain initial access, and used novel techniques such as leveraging an AI coding assistant with a reverse shell over MCP as a command and control channel. The operation involved more than 50TB of dedicated bare-metal infrastructure and approximately 6TB of stolen data. Azazel ran an independent leak site to publish victim data and collect ransom payments, bypassing the main ransomware-as-a-service operator. The investigation uncovered active exfiltration during the analysis and detailed victim notification was conducted prior to public disclosure.
The @badzz88/baileys npm package, a fork of the Baileys WhatsApp Web library, contains malicious code that silently subscribes the victim's WhatsApp account to attacker-controlled channels without user consent. This is achieved by injecting a covert FOLLOW query into the WhatsApp socket connection using the installer's authenticated session. The malicious code does not steal credentials, maintain persistence, or execute arbitrary code. The targeted channel IDs are obfuscated or fetched remotely, allowing attackers to change targets after installation.
ClingSTUN is a Linux malware strain that targets IoT devices by exploiting multiple unpatched vulnerabilities across various vendors. It functions as a back-connect proxy backdoor, abusing public STUN infrastructure to maintain connectivity and NAT bindings. The malware uses advanced persistence techniques, disguises itself as the init process, terminates watchdog timers, and kills competing malware processes. It supports remote command execution and self-propagates by exploiting at least seven additional vulnerabilities. The threat actor behind ClingSTUN has evolved their tactics over time, expanding from single-vendor exploits to multi-vendor command injection attacks.
The npm package 'serpacksven1' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removing the package alone does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
The npm package 'serpacksven2' contains malicious code that can fully compromise any computer on which it is installed or running. This compromise potentially grants an attacker full control over the affected system. Immediate removal of the package is recommended, but due to the severity of the compromise, simply removing the package may not eliminate all malicious components. All secrets and keys stored on the compromised system should be rotated from a separate, secure device.
The npm package 'documenclient' contains malicious code that compromises any computer on which it is installed or running. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, but full remediation may require rotating all secrets and keys from a different, uncompromised system due to potential persistent control by an attacker.
The npm package 'serpacksven' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a separate, secure device. Removing the package alone does not guarantee removal of all malicious components, as the attacker may have gained full control of the system.
The dzyhaxz-baileys npm package is a malicious fork of the Baileys WhatsApp library that automatically causes WhatsApp-authenticated users to follow a hardcoded channel without their consent. It also aliases critical cryptographic dependencies to author-controlled packages with mutable version tags, enabling supply-chain manipulation. This behavior violates the package's own documentation and poses a deceptive supply-chain risk. Although it does not steal credentials or enable remote code execution directly, any system with this package installed should be considered fully compromised.
The dzyclutch npm package, a fork of the Baileys WhatsApp library, contains malicious code that covertly subscribes the installer's WhatsApp account to author-controlled newsletter channels. This subscription occurs 30 seconds after connection and is hidden from the user by muting the channels. The list of subscribed channels is remotely controlled via a mutable GitHub raw URL, allowing dynamic changes without package updates. No credential theft, remote code execution, or data exfiltration outside WhatsApp is observed, but the installer's WhatsApp identity is misused to amplify the author's channel reach.
The npm package @diezyclutch/baileys contains malicious code or depends on a package with malicious code. Installing or running this package can lead to full compromise of the affected computer, risking exposure of all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different machine is strongly advised. However, removal may not fully eliminate the threat due to potential persistent malicious software.
The npm package yonzoffic-baileys version 8.6.90 is a malicious fork of the Baileys WhatsApp Web library that injects code to silently subscribe the victim's WhatsApp account to attacker-controlled channels without user consent. The malicious code uses the installer's authenticated WhatsApp session to issue a covert FOLLOW query to subscribe to hidden WhatsApp Channel/Newsletter JIDs. The target JIDs are obfuscated or fetched dynamically, allowing attackers to change targets post-installation. This behavior does not steal credentials, establish persistence, or execute arbitrary code.
The Azazel affiliate of the Gentlemen ransomware group compromised over two dozen organizations across six countries by exploiting CI/CD secrets from GitLab and deeply compromising an AI platform using SSRF, credential decryption, and continuous data exfiltration. Azazel operated an independent leak site called LEAKNED to publish stolen data and manage extortion proceeds. This campaign is notable for the first documented criminal use of AI assistant tooling via the Model Context Protocol (MCP) as a command-and-control channel. The attacker infrastructure included three nodes with over 50TB storage capacity, transferring approximately 6TB of victim data. Affected sectors include logistics, insurance, pharmaceutical, AI, medical devices, and government-adjacent organizations.
The alleged developer of Ploutus malware, used in ATM jackpotting attacks across the United States, was arrested and appeared in US court. Ploutus malware enabled criminals to steal millions of dollars by compromising ATMs, with attacks occurring between February 2024 and December 2025. The malware included anti-analysis features to hinder forensic investigation and attempted to conceal its presence by deleting itself from infected ATMs. The criminal operation was linked to the Venezuelan Tren de Aragua gang, which laundered stolen funds internationally. The DOJ charged the developer with multiple offenses including bank fraud conspiracy and providing material support to terrorists. The attacks targeted financial institutions in 47 US states and several foreign countries, resulting in over $5.4 million stolen in confirmed incidents and additional attempted thefts.
ClingSTUN is a Linux backdoor malware that operates as a back-connect proxy using the STUN protocol. It sets up persistence on infected systems and exploits multiple vulnerabilities across various device vendors for initial access and self-propagation. The malware abuses legitimate public STUN servers to maintain NAT connectivity and avoid direct attacker infrastructure. It targets a wide range of vulnerabilities in devices from vendors such as Avtech, EnGenius, D-Link, and others, and supports multiple CPU architectures. ClingSTUN also kills competing malware processes and listens for specific packets to execute remote commands and propagate further.
The bitcoin-rpc-lite RubyGem version 1.0.0 and 1.0.3 contains malicious code in its native extension build script extconf.rb. This script executes automatically during gem installation and, after evasion checks, opens a reverse shell to a hardcoded attacker IP address, allowing remote code execution. The malicious payload is concealed via Base64 encoding and delayed execution to evade detection in short-lived environments.
The RubyGems package 'web3-eth-utils' version 1.0.0 and 1.0.3 contains malicious code that executes during gem installation. The native extension script performs environment checks to evade sandbox and CI environments, then decodes and executes a Ruby payload that establishes a persistent reverse shell to a remote IP address. The package is a typosquat lure mimicking legitimate web3/eth ecosystem packages, with the actual malicious behavior hidden in the install-time hook.
The RubyGems package 'btc-wallet-tools' version 1.0.0 and 1.0.3 contains malicious code in its native extension script 'ext/req_throttle_mini/extconf.rb'. This script executes during gem installation and, after performing environment checks to evade analysis, decodes and runs a Base64-encoded Ruby payload that opens a reverse shell to a remote attacker. The reverse shell connects to IP 45.138.12.177 on TCP port 8090, providing the attacker with remote shell access to the host. The malicious behavior is concealed by delaying execution and checking for developer artifacts, making detection difficult during automated scans.