Tracked campaign · npm

asteroiddao npm campaign

Coordinated mass-publish of 36 npm packages from publisher asteroiddao with preinstall hooks invoking relative binary paths. Detected by PkgRadar at 01:05 UTC 2026-05-26.

2,505 packages attributednpm ecosystempkgradar source

First seen 2025-05-26

Attribution basis

These are the signal classes linking the members of this campaign — the broad evidence categories we use to attribute a package, not the raw indicators themselves.

shared malware fingerprint
shared publisher account

PkgRadar attributes coordinated supply-chain campaigns and blocks their packages at the CI gate. Start free or see all tracked campaigns.