Outsource IT Computing Inc. logo
HighSupply chainOct 7, 2026

Malicious Software Packages Downloaded Over 40,000 Times Spread Data-Stealing Malware

Security researchers uncovered a supply chain attack involving malicious npm packages downloaded tens of thousands of times since August 2023. These packages secretly install information stealers and remote access trojans directly onto compromised computers. If your team relies on affected code, threat actors could gain full remote control of your machines and steal critical company data.

Supply chain security briefing

Who is affected

Businesses and software development teams utilizing open-source JavaScript and Node.js components containing the compromised npm packages are at risk.

How to mitigate it

  1. 1Audit all software projects and internal developer environments for malicious npm dependencies linked to the MALFEX campaign.
  2. 2Deploy managed endpoint detection and response tools to spot and isolate unauthorised remote access trojans.
  3. 3Implement automated software composition analysis to vet third-party open-source packages before they enter your environment.
  4. 4Restrict administrative permissions on developer workstations to contain the spread of malicious script executions.

How Outsource IT solves this

Managed Cybersecurity and Threat Protection provides continuous 24/7 SOC monitoring and advanced endpoint defence to detect, isolate, and eliminate information stealers and trojans.

Managed Cybersecurity & Threat Protection

Tags

Supply ChainMalwareOpen Sourcenpm

Source advisory: the-hacker-news

Not sure whether this affects your business?

Outsource IT has been delivering managed services for over 20 years from Burlington, Ontario, supporting organizations right across Canada. Ask our team to review your exposure.

Talk to a security specialistRun the free IT health check

More security briefings

View the full security feed

Testimonials

Don't just take our word for it.

  • We were introduced to Outsource IT at a time when we were interested in improving our IT infrastructure and associated services. In working with Outsource IT; they have rebuilt our confidence in third party IT administration. As CBM grows, we know we are in good hands as we focus on serving our clients.
    Canadian Business MachinesFull service designer and precision metal fabricator.
  • Over the past 8 years, we have received exceptional service from Outsource IT. Their attention to our needs has been prompt and thorough and we are pleased to have them as our ongoing IT service provider.
    Hamilton Family Health TeamOntario's largest Family Health Team with over 150 doctors
  • Outsource IT has brought critical thinking, support and value to our Organization. Their attention to detail and strategic approach leverages I.T. operations to meet today's industry standards. Being EXCEPTIONAL is exactly what Outsource IT has brought to CICC.
    CICCCollege of Immigration and Citizenship Consultants

Technology partners we build on

Certified expertise across the platforms that run Canadian business, from Microsoft and Cisco to Fortinet, Dell and HPE.

  • Microsoft technology partner logo
  • Cisco technology partner logo
  • Fortinet technology partner logo
  • Barracuda technology partner logo
  • Dell Technologies technology partner logo
  • HP technology partner logo
  • Hewlett Packard Enterprise technology partner logo
  • Lenovo technology partner logo
  • VMware technology partner logo
  • Google technology partner logo
  • Eaton technology partner logo
  • 3CX technology partner logo