Skip to content
Threat Feed
Subscribe

Actor

REF8801

1 brief RSS
high threat

REF8801 Campaign Distributes Malware via Malicious npm Packages

The REF8801 threat actor is distributing malicious npm packages targeting Web3 developers to deploy information stealers, backdoors, and hijack AI agent traffic.

REF8801 supply-chain npm malware information-stealer backdoor ai-security
3t 7i