National Cyber Warfare Foundation (NCWF)

G_Wagon NPM Package Exploits Users to Steal Browser Credentials with Obfuscated Payload


0 user ratings
2026-01-27 14:43:29
milo
Red Team (CNA)

A highly sophisticated infostealer malware disguised as a legitimate npm UI component library has been targeting developers through the ansi-universal-ui package. The malware, internally identified as “G_Wagon,” employs multi-stage obfuscation techniques to extract browser credentials, cryptocurrency wallets, cloud authentication keys, and messaging tokens from infected systems. Despite presenting itself as “a lightweight, modular UI component […]


The post G_Wagon NPM Package Exploits Users to Steal Browser Credentials with Obfuscated Payload appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.



Mayura Kathir

Source: gbHackers
Source Link: https://gbhackers.com/g_wagon-npm-package/


Comments
new comment
Nobody has commented yet. Will you be the first?
 
Forum
Red Team (CNA)



Copyright 2012 through 2026 - National Cyber Warfare Foundation - All rights reserved worldwide.