Developer-targeting campaign using malicious Next.js repositories

2026-02-24 (Back to Inventory)

Developer-targeting campaign using malicious Next.js repositories

Author(s): Microsoft Defender Experts
Organization: Microsoft

Open article directly Open article on Archive.org

2026-08-26 ⋅ Microsoft ⋅ Parasharan Raghavan, Sagar Patil, Suriyaraj Natarajan
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
Lorem Ipsum

2026-06-25 ⋅ Microsoft Security ⋅ Microsoft Defender Experts, Microsoft Defender Security Research Team, Parth Jomadkar
Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
TonRAT

2026-06-17 ⋅ Microsoft ⋅ Microsoft Defender Research Team
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

Propose Change Developer-targeting campaign using malicious Next.js repositories

Related Articles

Developer-targeting campaign using malicious Next.js repositories