> Hijacked npm Packages Deliver Malware via Solana, Linked to Glassworm
[AUTHOR: Sonatype Security Research Team]
[DATE: 17/03/2026 21:22]
[LANGUAGE: EN]
Sonatype Security Research has identified two hijacked npm packages in the React Native ecosystem that receive more than 30,000 downloads collectively per week and were modified to deliver multi-stage malware. Sonatype is tracking the malicious packages as sonatype-2026-001153.
The post Hijacked npm Packages Deliver Malware via Solana, Linked to Glassworm appeared first on Security Boulevard.