Socket on Mythryl: “🚨 New research: A spearphishing campaign published 27 malicious npm…”

🚨 New research: A spearphishing campaign published 27 malicious npm packages that host browser-run lures mimicking document portals and Microsoft sign-in to steal credentials. This operation targets manufacturing and healthcare orgs in the U.S. and allied countries. socket.dev/blog/spearph...

socket.devSpearphishing Campaign Abuses npm Registry to Target U.S. an...A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, ta...

23/12/25, 7:47 pm3 reposts6 likes

Post