npm RAT Typosquatted Package Install via npm.cmd or node.exe

Ankit Mehta@Secvyn

•updated Jun 29, 2026•1•0•4

Detects the use of npm to install known malicious npm packages, which is indicative of a supply chain compromise attempt via typosquatting or malicious dependency injection.