malware
npm
file-entry-cache
discovered 2026-08-04File entry cache library (147M weekly downloads). Compromised via jaredwray account. Variant A payload.
Threat types
credential_stealer worm persistence
Malicious versions
- 11.1.6