#rat

2 analyses tagged rat, sorted newest first.

critical 5 sources
Axios npm Package Compromise (UNC1069)
On March 31, 2026, the popular JavaScript HTTP client Axios was compromised when attackers hijacked a lead maintainer's npm account, publishing malicious versions containing a phantom dependency to drop a cross-platform Remote Access Trojan (RAT).

#npm #supply-chain #compromise #rat #waveshaper #unc1069

2026-03-31
critical 4 sources
PyPI spellcheckpy Typosquatting RAT Campaign
Attackers published typosquatted versions of the popular pyspellchecker library to deliver a Remote Access Trojan (RAT) hidden inside compressed Basque dictionary files.

#pypi #typosquatting #rat #malware

2026-01-23