Learn
archived
148 Malicious npm Packages Weaponized Browsers as DDoS Botnet
- Engineer — Learn: Novel abuse of npm as free hosting infrastructure to serve malicious browser-side JavaScript to site visitors rather than targeting package consumers directly; review whether your org hosts any user-facing content via npm and revisit supply-chain threat models to include registry-as-CDN attack patterns.
- SOC/IR — Learn: No IOCs or ATT&CK-mapped TTPs are published from this research, so there is nothing actionable to hunt or detect today; file as a reference technique — browser-based DDoS recruited via malicious proxy sites — for future detection engineering when lure sites targeting your sector emerge.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.