{"ok":true,"trend":{"id":349417,"platform":"mastodon","region":"global","key":"(safedep.io) dirtyblanket: self-spreading linux worm distributed via malicious npm packages targeting developers in brie","title":"(safedep.io) DirtyBlanket: Self-Spreading Linux Worm Distributed via Malicious npm Packages Targeting Developers In brie","url":"https://swecyb.com/@orlysec/117353881770419203","first_seen":"2026-09-29T10:53:49.857736Z","last_seen":"2026-09-29T10:53:49.857736Z","last_rank":6,"peak_rank":6,"last_volume":1,"peak_volume":1,"seen_count":1,"score":0.98171875,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"Security researchers at SafeDep report a self-spreading Linux worm, dubbed DirtyBlanket, distributed through nine malicious npm packages impersonating popular libraries such as Express and React. Once installed, the malware targets developers' Linux machines and propagates further, making supply-chain attacks on the JavaScript ecosystem a renewed concern for developers reviewing dependencies.","why":"Newly disclosed self-propagating malware in widely used npm packages alarms developers who rely on those libraries daily.","tone":"negative","entities":["SafeDep","DirtyBlanket","npm","Linux","Express"],"summarized_at":"2026-09-29T10:55:44.740419Z","meta":{"tag":"cybersecurity","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":1131},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"DirtyBlanket Linux Worm Spreads Through Malicious npm Packages","section_name":"Technology","category_name":"Cybersecurity","timeline":[],"posts":[{"platform":"mastodon","url":"https://swecyb.com/@orlysec/117353881770419203","author":"orlysec@swecyb.com","title":null,"snippet":"(safedep.io) DirtyBlanket: Self-Spreading Linux Worm Distributed via Malicious npm Packages Targeting Developers In brief - This article describes a self-spreading Linux worm distributed via nine malicious npm packages that impersonate popular libraries like Express and React.…","posted_at":"2026-09-29T10:35:27Z","likes":1}],"elsewhere":[],"window":"7d"}}