auth-javascript
auth-javascript is identified in the SafeDep analysis "Malicious npm Packages Backdoor Claude Code Sessions". >-
discovered 2026-05-13
Threat types
ratpersistence
Malicious versions
- 0.0.17
Campaigns
Indicators
Techniques
- ttpT1195.001 Supply Chain Compromise: Compromise Software Dependencies and Development Toolsuses
- ttpT1059.007 Command and Scripting Interpreter: JavaScriptuses
- ttpT1539 Steal Web Session Cookieuses
- ttpT1105 Ingress Tool Transferuses
- ttpT1071.001 Application Layer Protocol: Web Protocolsuses
- ttpT1102 Web Serviceuses
- ttpT1546 Event Triggered Executionuses
