Cybersecurity · 1 views

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-base…

Source The Hacker News AI Summary Updated June 29, 2026

Story intelligence Beta

Freshness Stale Updated June 29, 2026

Confidence Limited Single-outlet story

Coverage Single outlet

Views 1 Community interest

Read time 1 min ~53 words

AI Summary

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts. "This attack avoids the most common npm execution paths through lifecycle scripts, perhaps in an attempt to remain 'compatible' with npm v12's security…

Read full article on The Hackernews

AI summaries can be wrong sometimes—always verify important details using the source article.