{"ok":true,"trend":{"id":356460,"platform":"mastodon","region":"global","key":"(cloudsek.com) automated typosquatting attack on npm registry: 85 malicious packages target popular libraries via scoped","title":"(cloudsek.com) Automated Typosquatting Attack on npm Registry: 85 Malicious Packages Target Popular Libraries via Scoped","url":"https://swecyb.com/@orlysec/117354161336364991","first_seen":"2026-09-29T12:15:56.722891Z","last_seen":"2026-09-29T12:15:56.722891Z","last_rank":12,"peak_rank":6,"last_volume":1,"peak_volume":1,"seen_count":1,"score":0.7584375,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"Cybersecurity firm CloudSEK reports an automated typosquatting campaign on the npm registry, with 85 malicious packages published under the @prime0 scope to impersonate popular libraries and trick developers into installing them. The packages target widely used open-source dependencies, raising concerns about supply chain security and the ease of automating fake package publication at scale.","why":"Supply chain attacks on npm keep hitting developers, and this campaign shows how easily automation can scale malicious package publication.","tone":"negative","entities":["npm","CloudSEK","@prime0"],"summarized_at":"2026-09-29T12:17:49.841935Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":1021},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"85 malicious npm packages found in typosquatting campaign","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-09-29T12:15:56.722891Z","rank":6,"volume":1},{"captured_at":"2026-09-29T12:15:56.722891Z","rank":12,"volume":1}],"posts":[{"platform":"mastodon","url":"https://swecyb.com/@orlysec/117354161336364991","author":"orlysec@swecyb.com","title":null,"snippet":"(cloudsek.com) Automated Typosquatting Attack on npm Registry: 85 Malicious Packages Target Popular Libraries via Scoped Names In brief - This article describes a typosquatting campaign where 85 malicious npm packages were published under the @prime0 scope to trick developers…","posted_at":"2026-09-29T11:46:33Z","likes":1}],"elsewhere":[],"window":"7d"}}