malware npm

mutex-core

discovered 2026-09-18

Reported by external campaign tracking as part of the MathMain npm Supply Chain Attack / Equation of Compromise family, not independently verified by SafeDep. Masquerades as a math/matrix/events/mutex/btree/graph utility; version ranges and dates as reported.

Threat types

rat c2_agent

Malicious versions

  • 2.1.2

Campaigns

Read the full analysis →