malware npm

@arv-bedrock/auth

discovered 2026-08-04

Bedrock Analytics auth package. Compromised via sitthidet_arv account. Variant B payload.

Threat types

credential_stealer worm persistence

Malicious versions

  • 1.1.7
  • 1.1.8

Campaigns