lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
#HuggingFace
General
2026-04-15 •
Malicious npm Package js-logger-pack Ships a Multi-Platform WebSocket Stealer
Share:
3
Tagged Reports
2
Unique Authors
44
Active Days
Tagged Reports
2026-05-28
Safe Dep
Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFace
#FamousChollima
#NPM
#T1195
#T1195.002
#T1102
#T1102.002
#T1567
#T1567.002
#T1056
#T1056.001
#T1113
#T1005
#T1552
#T1552.004
#T1059
#T1059.001
#T1059.003
#T1547
#T1547.001
#T1053
#T1053.005
#T1543
#T1543.001
#T1543.004
#HuggingFace
#T1119
2026-04-23
Jfrog
js-logger-pack Operator Turns Hugging Face into a Malware CDN and Exfiltration Backend
#HuggingFace
#NPM
#T1195
#T1056.001
#T1115
#T1567.002
#T1105
#T1547.001
#T1543.001
#T1053.005
2026-04-15
Safe Dep
Malicious npm Package js-logger-pack Ships a Multi-Platform WebSocket Stealer
#NPM
#HuggingFace
#T1195.002
#T1056.001
#T1552.001
#T1555
#T1105
#T1547
« Back