ScavengerMalware
- scvngr
Scavenger is a stealthy, two-stage malware family first observed in July 2025 following a targeted supply chain attack on the NPM ecosystem. The infection began with a phishing campaign that leveraged a typo-squatted domain (npnjs[.]com) to impersonate the legitimate NPM login page.From MISP Galaxy
Last reported 4 months ago, by Huntress3 reports
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
3 reports, newest first · the exact sentence from each-
Before Your MSP Chases CMMC, Take an Honest Look at Your Operations“…ou produce logs, access records, change history, training records, remediation records, and incident records without turning it into a scavenger hunt?”
-
Agentic Governance: Why It Matters Now“Without an inventory, there is no governance — only a weird scavenger hunt after something breaks.”
-
The Real Risk of Vibecoding“Suddenly, fixing a “small” issue turns into a scavenger hunt:”
Thanks — we review every report.