malware npm

@qlik/sdk

discovered 2026-08-04

Qlik SDK. Representative of ~28 compromised @qlik packages + ~22 @nebula.js packages + 6 unscoped Qlik packages. Compromised via qlikossbuild account. Variant B payload.

Threat types

credential_stealer worm persistence

Malicious versions

0.28.1

Campaigns

Mini Shai-Huludattributed-to