23:26
2026-08-06
opensourcemalware.com
ai-safety
Russian AI Slopsquatting Publishes 700+ Malicious NPM Packages
A threat actor published more than 700 malicious packages to the npm registry over 48 hours, using AI-generated typo-squatted names to deliver a cross-platform RAT and infostealer. The packages, such …