malware npm

@arv-bedrock/auth-sso

discovered 2026-08-04

Bedrock Analytics auth-sso. Compromised via sitthidet_arv account. Variant B payload.

Threat types

credential_stealer worm persistence

Malicious versions

  • 1.6.2

Campaigns