PkgRadar

Tracked campaign · npm

@nolimit-x binary payload

npm packages shipping a Windows PE (SMTP bulk-mailer/credential-checker) as the package main entry, with no source code or documentation.

350 packages attributednpm ecosystemosv source

First seen 2025-05-22

Attribution basis

These are the signal classes linking the members of this campaign — the broad evidence categories we use to attribute a package, not the raw indicators themselves.

Sample attributed packages

PkgRadar attributes coordinated supply-chain campaigns and blocks their packages at the CI gate. Start free or see all tracked campaigns.