[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB9QlUZfD04O-VOWF7381ynG7l6Pe7ESK9_bLIaMN82Q":3},{"article":4,"iocs":45},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":27},"d39a33c0-f8eb-4785-ad31-112bbb46c2f2","MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data","malfex-npm-attack-spreads-windows-rat-steals-discord-and-browser-data-6cff5e","CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,…","The MALFEX campaign has been identified by CloudSEK, leveraging malicious npm packages to distribute the Overlord RAT. This malware is designed to steal sensitive data, including credentials from Discord and various web browsers. The attack highlights the ongoing risks associated with the software supply chain and the use of open-source repositories.","MALFEX campaign uses malicious npm packages to deploy Overlord RAT and steal data.",null,"https:\u002F\u002Fhackread.com\u002Fmalfex-npm-windows-rat-steals-discord-browser-data\u002F","2026-09-30T19:28:15+00:00","2026-09-30T20:00:17.572487+00:00",8,[17,20],{"name":18,"type":19},"MALFEX","campaign",{"name":21,"type":22},"npm","product","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":23,"icon":11,"name":25,"slug":26},"Malware","malware",[28,33,35,40],{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":34},{"id":23,"icon":11,"name":25,"slug":26},{"category":36},{"id":37,"icon":11,"name":38,"slug":39},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":41},{"id":42,"icon":11,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[46],{"type":26,"value":47,"context":48},"Overlord RAT","Malware deployed by the MALFEX campaign"]