Expired50% confidenceEventExact time
After installation on Windows and macOS systems, the malicious npm packages spread infostealers, plant backdoors, and hijack AI agents' outbound traffic.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/19/2026
First Seen
This claim has expired. It is kept for the record and no longer describes the current state.
Valid until: 11/2/2026(expired)
Sources
Related Entities
Related Claims
UnverifiedSome AI vulnerability-hunting tools sold in packages may themselves carry backdoor programs, causing malicious software to be implanted in users' systems.72% similarVerifiedAttackers can exploit stolen AI service account credentials to call API interfaces for computing power theft, and such behavior has frequently appeared in terms-of-service violation reports on platforms such as OpenAI and Anthropic.70% similarUnverifiedAttackers can forge cryptographically signed firmware patches and deploy corrupted firmware to AI acceleration hardware, causing physical paralysis of the cluster.69% similarUnverifiedIn AI agent scenarios, over-privileged MCP servers can become a springboard for attackers to conduct lateral movement or data exfiltration when subjected to prompt injection attacks.69% similarUnverifiedOnce secrets and tokens are scanned and exfiltrated, they may lead to hijacking of cloud service accounts, tampering with code repositories, and use as a springboard for supply chain attacks.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1072664API
curl https://kongchang.com/api/v1/knowledge/claims/1072664MCP
get_claim(id=1072664)