malware npm

cacheable

discovered 2026-08-04

Cacheable library compromised via jaredwray account. Variant A payload.

Threat types

credential_stealer worm persistence

Malicious versions

  • 2.5.1

Campaigns