malware npm

@arv-bedrock/auth-sso-backend

discovered 2026-08-04

Bedrock Analytics auth-sso-backend. Compromised via sitthidet_arv account. Variant B payload.

Threat types

credential_stealer worm persistence

Malicious versions

  • 1.7.2

Campaigns