Cybersecurity researchers have discovered four new npm packages containing information-stealing malware, one of which is a clone of the Shai-Hulud worm open-sourced by TeamPCP.The list of identified packages is below -chalk-tempalte (825 Downloads)@deadcode09284814/axios-util (284 Downloads)axois-utils (963 Downloads)color-style-utils (934 Downloads)”One of the packages (chalk-tempalte)
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/05/four-malicious-npm-packages-deliver.html
![]()

