Malicious npm Transitive Dependency Side-Loading via log-taker/data-parser-utils

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects the execution of Node.js or npm processes that reference known malicious transitive npm dependencies or typosquatted packages identified in the Polymarket Trap supply chain campaign, such as 'log-taker' and various 'thirdweb' typosquats.