Fake npm Packages Pose as Alibaba Developer Tools, Drop Remote-Control Malware

Key points

• Researchers uncovered 18 malicious npm packages posing as internal Alibaba developer tools, one named lib-mtop to mimic a real private Alibaba package.
• The packages install a cross-platform remote access trojan, malware that lets attackers take full control of an infected machine.
• The campaign targets Chinese-speaking developers and their workplaces, not ordinary consumers.
• The attack is a textbook supply chain compromise: the poison is planted in code that developers trust and reuse.
• Developers pulling packages from npm should verify names against their company's real internal package list before installing.

Security researchers have flagged a fresh batch of poisoned software packages on npm, the public library where JavaScript developers grab ready-made code to plug into their projects. Eighteen packages are aimed at people who work with Alibaba's developer tools, and they carry a remote access trojan (RAT), malware that hands an outside attacker the keys to the infected machine.

The campaign was reported by The Hacker News. It's narrow, targeted, built for Chinese-speaking engineering teams. We first covered dependency confusion attacks on 3 August 2026, and this pattern hasn't grown less effective since.

The headline package is called lib-mtop. That name isn't random. Alibaba runs a private, internal package with the same name, meaning it exists only inside the company's own systems. The attackers registered the public version hoping a developer's build system would grab the poisoned copy by mistake.

What is this attack, in plain English?

It's name-squatting on a code library, with malware attached. Think of npm as a giant shared pantry that developers dip into for pre-made ingredients. If someone slips a jar with the same label as your usual brand onto the shelf and your kitchen picks it up by habit, you cook with poison.

Security people call this a dependency confusion attack. The idea is old, but it keeps working because build systems are careless about telling public and private sources apart. Anyone who remembers the 2021 dependency confusion research by Alex Birsan will recognise the shape immediately.

What does the malware actually do?

The RAT runs on Windows, macOS and Linux. Once running, it lets the attacker issue commands and read files as if they were sitting at the keyboard.

For a developer, that's a bad outcome. Developer laptops hold cloud credentials and access to production systems. A RAT on that machine is effectively a RAT on the company.

Who is actually at risk?

Developers, not the general public. Specifically, engineers working with Alibaba tooling in Chinese-speaking environments, though nothing stops the same pattern being reused against other firms.

Alibaba shoppers and cloud customers aren't the target. This is an attack on the people who build software, meant to reach the companies behind them.

What should teams do now?

Check what your build system pulled in recently. If any machine installed lib-mtop or other suspicious lookalikes from the public npm registry, treat that machine as compromised until proven otherwise.

Longer term, lock your package manager to your private registry for internal package names, and require a scoped prefix (like @yourcompany/) on anything internal. Public npm should never answer a request for a name that belongs to you.

Common questions

Is my personal computer at risk from these packages?

Almost certainly not, unless you write software and install npm packages yourself. These are developer tools, not apps a normal person would run.

Has npm removed the packages?

Malicious packages flagged in reports like this are typically pulled from the registry quickly, but copies may already sit inside company build caches. Teams need to check their own systems rather than trust the cleanup alone.