Security Bloggers Network 
SBN

Hijacked npm Package Attempts to Deliver PolinRider-Linked RAT

by Sonatype Security Research Team on May 21, 2026

The post Hijacked npm Package Attempts to Deliver PolinRider-Linked RAT appeared first on 2024 Sonatype Blog.

Image with large text at center "npm package hijack" and the Sonatype company name above it.

Attackers do not need to wait for a CVE when they can publish directly into the build.

*** This is a Security Bloggers Network syndicated blog from 2024 Sonatype Blog authored by Sonatype Security Research Team. Read the original post at: https://www.sonatype.com/blog/hijacked-npm-package-attempts-to-deliver-polinrider-linked-rat

Sonatype Security Research Team , , , , , ,