Malware-Slop malicious npm file-theft campaign
Campaign
Summary
Hide ▲
Show ▼
Malware-Slop is distributing mouse5212-super-formatter, a malicious npm package that steals local files from Anthropic's Claude workspace directory /mnt/user-data. The package runs in the postinstall stage, authenticates to GitHub, and uploads files to a threat actor-controlled GitHub account while writing a fake diagnostic log to mask the theft. OX Security reported that the package was still live on npm at the time of analysis and had about 676 downloads before removal. The linked GitHub account was created on 2026-05-26, shortly before the first malicious upload, and the package exposed a hardcoded fallback token that let researchers observe the exfiltration flow.
Related Happenings
AsyncAPI repositories and npm publishing workflow hit by network compromise
Incident
H score27
First: 15.07.2026 12:16
Last: 15.07.2026 12:16
Sources 1
About this happening:
The AsyncAPI npm publishing pipeline was compromised in a July 14 supply-chain attack that used the project’s normal GitHub Actions release path to publish trojani...
AsyncAPI repositories and npm publishing workflow hit by network compromise
IncidentAbout this happening: The AsyncAPI npm publishing pipeline was compromised in a July 14 supply-chain attack that used the project’s normal GitHub Actions release path to publish trojani...
GitHub fake-repository infostealer campaign
Campaign
H score41
First: 14.07.2026 22:15
Last: 14.07.2026 22:15
Sources 1
About this happening:
A GitHub impersonation campaign is distributing infostealer malware through 292 fake repositories, expanding the risk to users searching for trusted software downloads...
GitHub fake-repository infostealer campaign
CampaignAbout this happening: A GitHub impersonation campaign is distributing infostealer malware through 292 fake repositories, expanding the risk to users searching for trusted software downloads...
OpenMandriva Linux project hit by cyberattack
Incident
H score32
First: 10.07.2026 01:14
Last: 10.07.2026 01:14
Sources 1
About this happening:
The OpenMandriva Linux project is recovering from an attempted internal sabotage that deleted repositories and published an empty package that could have damaged user...
OpenMandriva Linux project hit by cyberattack
IncidentAbout this happening: The OpenMandriva Linux project is recovering from an attempted internal sabotage that deleted repositories and published an empty package that could have damaged user...
GitHub API enumeration campaign targeting corporate organizations
Campaign
H score17
First: 09.07.2026 21:38
Last: 09.07.2026 21:38
Sources 1
About this happening:
A GitHub API reconnaissance campaign is systematically mapping corporate organizations, repositories, and user accounts across multiple companies, expanding the risk of fo...
GitHub API enumeration campaign targeting corporate organizations
CampaignAbout this happening: A GitHub API reconnaissance campaign is systematically mapping corporate organizations, repositories, and user accounts across multiple companies, expanding the risk of fo...
GitHub Agentic Workflows indirect prompt injection security flaw
Vulnerability
H score27
First: 07.07.2026 17:04
Last: 07.07.2026 17:04
Sources 1
About this happening:
GitHub Agentic Workflows has an indirect prompt injection flaw that can let a public issue leak content from private repositories into public comments. The risk is...
GitHub Agentic Workflows indirect prompt injection security flaw
VulnerabilityAbout this happening: GitHub Agentic Workflows has an indirect prompt injection flaw that can let a public issue leak content from private repositories into public comments. The risk is...
Timeline
-
27.05.2026 18:44 1 articles · 1mo ago
GitHub account tied to Malware-Slop is created before the first malicious npm upload
Campaign Scope UpdateThe GitHub account linked to the Malware-Slop campaign was created on May 26, 2026, a few hours before the first malicious version was uploaded to npm, giving the operator a destination for stolen files.
Show sources
- Malicious npm Package Stole Files From Claude AI User Directory via GitHub — thehackernews.com — 27.05.2026 18:44
-
27.05.2026 18:44 3 articles · 1mo ago
OX Security finds mouse5212-super-formatter stealing Claude AI workspace files
Initial DisclosureOX Security identified the malicious npm package mouse5212-super-formatter as a file-stealing loader that runs in the postinstall stage, targets Anthropic's Claude AI workspace directory /mnt/user-data, authenticates to GitHub with an environment token or hard-coded fallback, creates or checks a repository, and recursively uploads files while writing a fake network connections log. The package was still available on npm and was estimated at 676 downloads, and the linked GitHub account leaked a private token.
Show sources
- Malicious npm Package Stole Files From Claude AI User Directory via GitHub — thehackernews.com — 27.05.2026 18:44
- Malicious npm Package Stole Files From Claude AI User Directory via GitHub — thehackernews.com — 27.05.2026 18:44
- AI-Generated npm Malware Leaks Its Own GitHub Token — www.infosecurity-magazine.com — 29.05.2026 11:10