New Blog: npm Worm Poisons 1,684 Package Versions Across Nine Organisations
Edit Calendar Icon 4 Aug 2026
SafeDep Logo
malware npm

ecto

discovered 2026-08-04

Ecto library compromised via jaredwray account. Variant B payload with IDE hook commits (GitHub API-verified, spoofed github-actions[bot]).

Threat types

credential_stealer worm persistence

Malicious versions

  • 5.0.1

Campaigns

Techniques