Breach404
Back to Insights
Secure Software2 min readAugust 3, 2026

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Attackers have distributed 18 malicious npm packages that install remote access trojans on developers' machines, specifically targeting users of Alibaba tools. You should immediately audit your npm dependencies to identify and remove any suspicious packag

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site - headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now - It's Free