TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8740
@thehackernews
The Hacker News
Post content
Post content
🛑 36 npm packages posing as Strapi plugins were used to deliver malware that runs on install. They exploited Redis and PostgreSQL, stole credentials, and deployed backdoors via postinstall scripts with full user or CI/CD access. 🔗 Details → https://thehackernews.com/2026/04/36-malicious-npm-packages-exploited.html