malware
npm
flat-cache
discovered 2026-08-04Flat cache library (149M weekly downloads). Unpublished from npm, still on npmmirror. Compromised via jaredwray account. Variant A payload.
Threat types
credential_stealer worm persistence
Malicious versions
- 6.1.24
