npm Package Found Delivering Sophisticated RAT

⚠️This appears to be an ongoing campaign. Since publication, additional packages have been released tied to this threat actor. See the IOCs below.

On January 12, 2024 Phylum’s automated risk detection platform alerted us to a suspicious publication on npm. The package in question, oscompatible, contained

actor automated campaign detection found iocs january npm npm package package packages phylum platform question rat research risk threat threat actor