plain-crypto-js

Named by 2 kept items in this workspace.

Search every workspace for plain-crypto-js. It matches the name as written, so it can find other things that share it.

The items that name it 2

Supply Chain Zero Days: Closing the Gap Between Publication and Detection
article2026-10-19It is written here as plain-crypto-js: newly created malicious npm package used as a dependency in the malicious axios versions.
What is a dependency firewall?
article2026-07-13It is written here as plain-crypto-js (malicious package).
Malicious transitive dependency added to axios in the March 2026 attack; its postinstall hook dropped a cross-platform RAT; existed for less than 24 hours before being pulled.

All threat actors in this workspace.