malware npm

file-entry-cache

discovered 2026-08-04

File entry cache library (147M weekly downloads). Compromised via jaredwray account. Variant A payload.

Threat types

credential_stealer worm persistence

Malicious versions

  • 11.1.6

Campaigns