Hijacked npm Packages Deliver Malware via Solana, Linked to Glassworm

Malware News
1

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

Image with text "Glassworm malware: Two hijacked npm packages" next to a skull icon

Sonatype Security Research has identified two hijacked npm packages in the React Native ecosystem that receive more than 30,000 downloads collectively per week and were modified to deliver multi-stage malware. Sonatype is tracking the malicious packages as sonatype-2026-001153.

Article Link: Hijacked npm Packages Deliver Malware via Solana, Linked to Glassworm