Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets
2026-04-29T14:52:28Z•c83859342257032f811d2a524147f5a616d96192807e0851bd0ab15031174e6a
ai-securitybluenoroffbrowser-extensionscredentials-exposurecrypto-theftdata-breachinfostealeriotlazarusmacos-lotlmalwaremedtronicmirainpmpasskeysphishingprompt-injectionransomwaresim-farmsupply-chainvectwiper
What happened
Multiple high‑impact security incidents and trends reported: researchers uncovered a malicious npm dependency tied to an AI‑assisted commit that exfiltrates sensitive data and targets crypto wallets, and other npm supply‑chain packages exhibiting worm‑like propagation to steal developer credentials. KELA tracked ~2.9 billion compromised credentials in 2025 with infostealers as the primary access vector. A critical flaw in Vect 2.0 ransomware turns it into a destructive wiper, preventing recovery. Medtronic confirmed an IT breach after ShinyHunters claims. North Korean-linked groups (Lazarus/Bl
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- c83859342257032f811d2a524147f5a616d96192807e0851bd0ab15031174e6a
- Enrichment time
- 2026-04-29T14:52:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.