Tag: nodecordrat

1 Attack Reports | 0 Vulnerabilities

Attack reports

Malicious NPM Packages Deliver NodeCordRAT

Three malicious npm packages were discovered in November 2025, designed to deliver and install a new RAT malware family named NodeCordRAT. The packages, bitcoin-main-lib, bitcoin-lib-js, and bip40, mimicked legitimate Bitcoin-related libraries to deceive developers. NodeCordRAT uses Discord for com…
supply-chain
credential-theft
cryptocurrency
npm
2026-01-08
nodecordrat
Published: January 8, 2026
Downloadable IOCs: 0
Click here to see more Attack Reports