As cited
Copy frozen at (site build).
threat intel
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Researchers identified 14 trojanized npm packages disguised as calendar and streak utilities that deploy RedC2 4.0, an AI-powered Linux backdoor. The malicious packages execute a bundled binary as a background process upon module load, establishing unauthorized system access.
Why it matters: Developers using these packages from npm repositories face direct compromise of their build environments and production systems; audit your dependencies immediately for these trojanized packages and implement strict software supply chain controls.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Researchers identified 14 trojanized npm packages posing as legitimate calendar and streak utilities that deploy RedC2 4.0, an artificial intelligence (AI)-powered Linux backdoor. The packages execute a bundled binary as a detached background process upon module load to establish persistent access.
Why it matters: Developers using these npm packages face immediate compromise of Linux systems with an AI-assisted command and control (C2) backdoor; verify your dependencies immediately against the malicious package list.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Researchers identified 14 trojanized npm packages posing as legitimate calendar and streak utilities that deploy RedC2 4.0, an artificial intelligence (AI)-powered Linux backdoor. The packages execute a bundled binary as a detached background process upon module load to establish persistent access.
Why it matters: Developers using these npm packages face immediate compromise of Linux systems with an AI-assisted command and control (C2) backdoor; verify your dependencies immediately against the malicious package list.
- Source published
- First seen by Cybersecurity Tracker