2026-06-24 • JFrog Security
• Guy Korolevski, Yair Benamou
• js.jadesnow
Open article on Malpedia
🛡️ VERIFIED CYBER INTELLIGENCE ID: #3595716
⚠️ Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer
⏱️ vor 35d 7h (25.06.2026 um 10:47 Uhr) 📂 ⚠️ Malware / Trojaner / Viren 📡 Feed 🔗 Quelle: malpedia.caad.fkie.fraunhofer.de