Open links in new tab
  1. Threat actors misuse Node.js to deliver malware and other malicious ...

    Apr 15, 2025 · Since October 2024, Microsoft Defender Experts has observed and helped multiple customers address campaigns leveraging Node.js to deliver malware and other payloads that …

  2. Threat actors misuse Node.js to deliver malware and other malicious ...

    Apr 15, 2025 · Since October 2024, Microsoft Defender Experts (DEX) has observed and helped multiple customers address campaigns leveraging Node.js to deliver malware and other payloads …

  3. Hackers Abuse Node.js to Deliver Malware – Microsoft Warns

    Apr 16, 2025 · Attackers are increasingly exploiting Node.js, a widely trusted, open-source JavaScript runtime, to deliver sophisticated malware, steal sensitive data, and compromise entire systems.

  4. Threat actors misuse Node.js to deliver malware and other malicious ...

    Apr 15, 2025 · Node.js is an open-source, cross-platform JavaScript runtime environment that allows JavaScript code to run outside of a web browser. It’s widely used and trusted by developers because …

  5. Microsoft: Node.js Increasingly Used for Malware Delivery and Data ...

    Apr 16, 2025 · Node.js introducing malware Node.js, an open-source JavaScript runtime widely used by developers for server-side and desktop applications, allows code to be executed outside a browser. …

  6. Stealit Malware Abuses Node.js Single Executable Feature via Game …

    Oct 10, 2025 · Fortinet warns Stealit malware uses Node.js SEA and fake installers to deliver stealers, RATs, and persistence.

  7. Microsoft Alerts on Node.js Exploitation in Malware Campaigns

    Apr 17, 2025 · Microsoft has raised concerns about the increasing misuse of Node.js a popular JavaScript runtime environment for delivering malware and stealing data. Since October 2024, …

  8. New Stealit Campaign Abuses Node.js Single Executable Application

    Oct 10, 2025 · FortiGuard Labs has encountered a new and active Stealit malware campaign that leverages Node.js’ Single Executable Application (SEA) feature to distribute its payloads. This …

  9. Microsoft Warns of Node.js Abuse for Malware Delivery

    Apr 16, 2025 · The open source cross-platform runtime environment Node.js is popular among developers, allowing them to execute JavaScript code outside of web browsers. However, this also …

  10. Threat Hunt Report: CORNFLAKE.V3 Backdoor with Remote Code …

    Sep 2, 2025 · A thorough automated and manual evaluation of the JavaScript payload executed by the portable Node.js runtime has revealed clear indicators consistent with the behavior of a malware …

  11. Hackers Exploit Node.js to Spread Malware and Steal Sensitive Data

    Apr 16, 2025 · In a recent wave of cyberattacks observed since October 2024, Microsoft Defender Experts (DEX) have reported a uptick in the use of Node.js—a popular JavaScript runtime …