/usr/local/lib/.libcache.so

discovered 2026-06-21

LD_PRELOAD rootkit shared object. Hooks readdir/stat to hide MYRA files and processes. Compiled from C source during npm postinstall.

/usr/local/lib/.libcache.so — IOC — SafeDep Threat Intelligence - Real-time Open Source Software Supply Chain Security