Loading story…
The npm account for DuckDB was breached, resulting in multiple malicious package versions being published with wallet-drainer malware. This attack is part of the same campaign that previously targeted the Qix maintainer, using identical obfuscated code to steal cryptocurrency. Affected packages have been deprecated, but some remained live for hours before removal.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Several DuckDB NPM packages (versions 1.3.3 and 1.29.2) were compromised after maintainers fell victim to a phishing attack. Malicious code targeting cryptocoin transactions was introduced in these versions. The affected packages were quickly deprecated and replaced with safe versions within hours of discovery.
Jun 29, 2026
Security researchers have uncovered multiple campaigns involving malicious npm packages designed to steal developer credentials and sensitive information from Windows, macOS, and Linux systems. In one operation, ten typosquatted packages impersonated popular libraries such as TypeScript, discord.js, ethers.js, and others, using sophisticated obfuscation, fake CAPTCHA prompts, and postinstall hooks to deploy an information stealer that harvested credentials from system keyrings, browsers, and authentication services. The malware executed in a new terminal window to evade detection and sent stolen data, including IP addresses, to external servers. Another large-scale campaign, dubbed 'PhantomRaven,' involved 126 npm packages and over 86,000 downloads, targeting authentication tokens, CI/CD secrets, and GitHub credentials. These packages leveraged remote dynamic dependencies to fetch and execute payloads during installation, profiling infected devices and exfiltrating secrets for potential supply chain attacks. The attackers employed techniques such as slopsquatting, where AI-generated package recommendations led developers to install non-existent, malicious packages. Some packages impersonated tools from GitLab and Apache, and many remained available on npm at the time of reporting. The campaigns highlight the ongoing risks in the npm ecosystem, with attackers exploiting both user trust and platform weaknesses to compromise developer environments and CI/CD pipelines. Security experts warn that the theft of tokens and credentials could enable further attacks, including the introduction of malicious code into legitimate projects and broader supply chain compromises.
Jun 29, 2026
Security researchers reported a supply-chain compromise affecting official dYdX v4 client libraries distributed via **npm** and **PyPI**, where attackers published poisoned versions designed to steal cryptocurrency wallet secrets and enable follow-on compromise. The impacted packages were identified as `@dydxprotocol/v4-client-js` on npm (malicious versions **3.4.1**, **1.22.1**, **1.15.2**, **1.0.31**) and `dydx-v4-client` on PyPI (including **1.1.5post1**), which are commonly used by trading bots, automated strategies, and backend services that handle sensitive material such as seed phrases/private keys for signing. Analysis attributed the distribution method to likely **developer account/publishing credential compromise**, since the rogue releases were pushed using legitimate publishing credentials. The npm payload embedded logic to exfiltrate wallet seed phrases and a device fingerprint to a typosquatted domain, `dydx[.]priceoracle[.]site`, enabling correlation of victims across compromises and potentially **irreversible cryptocurrency theft**; reporting also noted that some infections could backdoor developer devices. The PyPI package was assessed as more severe, combining wallet-stealing with a **remote access trojan (RAT)** that executes on import and beacons to `dydx[.]priceoracle[.]site/py` to fetch and run attacker commands (including Windows execution behavior intended to reduce user visibility).
Jun 29, 2026