CERT24AI-Generated npm Malware Leaked the Attacker’s GitHub TokenLoading data…
CERT24Threat Observatory
Period

AI-Generated npm Malware Leaked the Attacker’s GitHub Token

The malicious npm package mouse5212-super-formatter leaked a hardcoded GitHub token left in its code. OX Security found that the package read files from victims’ machines and uploaded them to a GitHub repository controlled by the attacker. The package had been downloaded 676 times before it was removed.

← Back to intelligence

AI-Generated npm Malware Leaked the Attacker’s GitHub Token

The malicious npm package mouse5212-super-formatter leaked a hardcoded GitHub token left in its code. OX Security found that the package read files from victims’ machines and uploaded them to a GitHub repository controlled by the attacker. The package had been downloaded 676 times before it was removed.