CERT2436 Malicious npm Packages Exploited Redis and PostgreSQL to Deploy Persistent ImplantsLoading data…
CERT24Threat Observatory
Period

36 Malicious npm Packages Exploited Redis and PostgreSQL to Deploy Persistent Implants

Cybersecurity researchers discovered 36 malicious packages in the npm registry disguised as Strapi CMS plugins. The packages contained payloads that exploited Redis and PostgreSQL, deployed reverse shells, harvested credentials, and installed a persistent implant.

← Back to intelligence

36 Malicious npm Packages Exploited Redis and PostgreSQL to Deploy Persistent Implants

Cybersecurity researchers discovered 36 malicious packages in the npm registry disguised as Strapi CMS plugins. The packages contained payloads that exploited Redis and PostgreSQL, deployed reverse shells, harvested credentials, and installed a persistent implant.