corpus.blog
43,567 blogs · 5,563,491 posts Claim your blog
Record · corpus.blog/posts/01a0fab3-de57-73aa-a17c-4a89cef7f590

Malicious npm Package express-session-js Drops Full RAT Payload

safedep.io · published 2 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at safedep.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
11
Words captured
4,085

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.npmjs.com/package/express-session
npmjs.com
https://medium.com/@fofabot/fofa-5-0-new-discovery-tracking-apt-contagious-interview-iocs-601e01106029
medium.com
https://x.com/ThreatBookLabs/status/1925193613002346541
x.com
https://redasgard.com/blog/hunting-lazarus-contagious-interview-c2-infrastructure
redasgard.com
Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery
blog.nviso.eu
https://www.microsoft.com/en-us/security/blog/2026/03/11/contagious-interview-malware-delivered-through-fake-developer-job-interviews/
microsoft.com
https://thehackernews.com/2024/12/north-korean-hackers-deploy-ottercookie.html
thehackernews.com
https://securityonline.info/north-korean-apt-contagious-interview-floods-npm-registry-with-338-malicious-packages-to-steal-crypto/
securityonline.info
https://github.com/safedep/vet
github.com
https://github.com/safedep/vet-action
github.com
https://www.npmjs.com/package/express-session-js
npmjs.com
Elsewhere on safedep.io (2)