Security3 hSeptember 23, 2026, 00:58

Malicious npm Package Poses as Twilio Security Tool, Steals Credentials

Researchers disclosed a malicious npm package named tw-pkgprobe-7731 that masquerades as a security tool for developers integrating Twilio while stealthily harvesting sensitive data. It was uploaded to the npm registry in mid-August 2026 by an account called twdepprobe7731.

The Hacker News Open source

Malicious npm Package Poses as Twilio Security Tool, Steals Credentials

Package tw-pkgprobe-7731 was uploaded to npm in mid-August 2026
Published by the npm account twdepprobe7731
Pretends to be a security probe for Twilio integrations
Covertly attempts to exfiltrate developers' sensitive data

#Twilio#Npm

Chinese hackers hit 996 Zyxel switches and WordPress sites

Security

U.S. Warns Cartels Are Adopting Battlefield Drone Tactics Faster Than Defenses

Security

Volexity spots China-aligned UTA0565 exploiting Chrome and Windows zero-days

Security

Malicious npm Package Poses as Twilio Security Tool, Steals Credentials

Chinese hackers hit 996 Zyxel switches and WordPress sites

U.S. Warns Cartels Are Adopting Battlefield Drone Tactics Faster Than Defenses

Volexity spots China-aligned UTA0565 exploiting Chrome and Windows zero-days

ShinyHunters claims FBI personnel data theft via Oracle PeopleSoft zero-day