I am sure you're shocked to hear about another NPM compromise.
This one was because a maintainer let their email domain expire!
https://discourse.ifin.network/t/node-ipc-npm-packages-infected-with-stealer/454
#ThreatIntel #ThreatIntelligence #IFIN
IFIN - The Independent Federated Intelligence Network
npub1qm…nh363
2026-05-14 22:20:47 UTC
Author Public Key
npub1qm4tytdmranfklywc562p7gprs702mzkc4usqv6t8ja3d340evpslnh363Seen on
wss://relay.momostr.pinkPublished at
2026-05-14 22:20:47 UTCEvent JSON
{
"id": "df53fd9f2790d45b3a14711352efd1a6d2b611355c6b15b777ab236598b6391e",
"pubkey": "06eab22dbb1f669b7c8ec534a0f9011c3cf56c56c57900334b3cbb16c6afcb03",
"created_at": 1778797247,
"kind": 1,
"tags": [
[
"t",
"threatintelligence"
],
[
"t",
"ifin"
],
[
"t",
"threatintel"
],
[
"proxy",
"https://infosec.exchange/@ifin/116575256388547815",
"web"
],
[
"proxy",
"https://infosec.exchange/ap/users/115741367687413652/statuses/116575256388547815",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/115741367687413652/statuses/116575256388547815",
"pink.momostr"
],
[
"-"
]
],
"content": "I am sure you're shocked to hear about another NPM compromise.\n\nThis one was because a maintainer let their email domain expire!\n\nhttps://discourse.ifin.network/t/node-ipc-npm-packages-infected-with-stealer/454\n\n#ThreatIntel #ThreatIntelligence #IFIN",
"sig": "231166d529da885c34ab2f6824d7eed6f68921aeec03fc3918b529658fc7b0fe5fdd93d4962f5960aa5e7ba8b555180742f9cca9388f6892d61d55a8f59a8012"
}