Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages

Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages

/in

Cybersecurity researchers have discovered three malicious npm packages that are designed to deliver a previously undocumented malware called NodeCordRAT.
The names of the packages, all of which were taken down as of November 2025, are listed below. They were uploaded by a user named “wenmoonx.”

bitcoin-main-lib (2,300 Downloads)
bitcoin-lib-js (193 Downloads)
bip40 (970 Downloads)

“The

The Hacker News – ​Read More

Cisco Patches ISE Security Vulnerability After Public PoC Exploit ReleaseCisco Patches ISE Security Vulnerability After Public PoC Exploit ReleaseInitial Access Sales Accelerated Across Australia and New Zealand in 2025Initial Access Sales Accelerated Across Australia and New Zealand in 202...