Approximately 800 Malicious npm Packages Exploiting AI Hallucinations

A cyber attack campaign published around 800 malicious packages to the npm registry within approximately 48 hours.

These packages infect projects when included, without an installation script, on Windows, macOS, and Linux operating systems. A loader called WEL1DROPPER contains threats such as remote access Trojan and data…