Sophisticated npm Supply-Chain Attack Targets Alibaba Developers
A prolonged npm supply-chain campaign has targeted developers linked to Alibaba Group, deploying malicious packages disguised as internal tools to steal credentials, cloud API keys, and enterprise data. The operation, active for over three months, leveraged fake package names, layered dependencies, and a cross-platform remote access trojan (RAT) to infiltrate systems.
The attack was uncovered after researchers analyzed lib-mtop, an npm package initially appearing as a benign downloader. While the package existed for three years, new versions emerged in late March 2026, suggesting either a compromised maintainer account or a rogue insider. The package mimicked @ali-scoped tools Alibaba’s private internal dependencies tricking developers into installing it alongside legitimate components.
The malware chain was split across multiple npm packages to evade detection. Top-level packages, posing as Alibaba-related tools, depended on smart-config-manager, which in turn loaded cloud-config-fetcher and local-config-parser. These seemingly harmless components worked together to fetch and execute malicious code from an attacker-controlled GitHub repository. Using a Node.js sandbox escape technique, the malware bypassed security controls, retrieved additional payloads, and established persistence.
The final payload, aone-cli, functioned as a cross-platform RAT, enabling remote command execution, file exfiltration, host discovery, and reverse proxy capabilities. On macOS, it modified shell startup files and created Launch Agents; on Windows, it targeted an Alibaba security application to replace core code; and on Linux, it executed a detached binary before deleting traces.
Indicators of compromise include the malicious npm packages lib-mtop (an unscoped impersonation of a private @ali package) and aone-kit (a lure package). The campaign highlights the risks of supply-chain attacks, particularly when attackers exploit trusted dependency chains to deliver stealthy, multi-stage malware.
Source: https://cyberpress.org/fake-ai-infostealer-campaign/
Alibaba Group cybersecurity rating report: https://www.rankiteo.com/company/alibaba-group
npm, Inc. cybersecurity rating report: https://www.rankiteo.com/company/npm-inc-
"id": "ALINPM1785831845",
"linkid": "alibaba-group, npm-inc-",
"type": "Cyber Attack",
"date": "3/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Developers linked to Alibaba '
'Group',
'industry': 'Technology/E-commerce',
'name': 'Alibaba Group',
'size': 'Large',
'type': 'Corporation'}],
'attack_vector': 'Malicious npm packages',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Potentially '
'(credentials may '
'include PII)',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Credentials',
'Cloud API keys',
'Enterprise data']},
'description': 'A prolonged npm supply-chain campaign has targeted developers '
'linked to Alibaba Group, deploying malicious packages '
'disguised as internal tools to steal credentials, cloud API '
'keys, and enterprise data. The operation, active for over '
'three months, leveraged fake package names, layered '
'dependencies, and a cross-platform remote access trojan (RAT) '
'to infiltrate systems.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'supply-chain compromise',
'data_compromised': 'Credentials, cloud API keys, enterprise data',
'identity_theft_risk': 'High (credentials and PII exposure)',
'operational_impact': 'Potential unauthorized access to internal '
'systems and data exfiltration',
'systems_affected': 'Developer systems, internal Alibaba tools'},
'initial_access_broker': {'backdoors_established': 'Cross-platform RAT '
'(aone-cli)',
'entry_point': 'Malicious npm packages (lib-mtop, '
'aone-kit)',
'high_value_targets': 'Alibaba developers, internal '
'tools',
'reconnaissance_period': 'Over three months'},
'lessons_learned': 'Highlights the risks of supply-chain attacks, '
'particularly when attackers exploit trusted dependency '
'chains to deliver stealthy, multi-stage malware.',
'motivation': 'Credential theft, cloud API key theft, enterprise data '
'exfiltration',
'post_incident_analysis': {'root_causes': ['Compromised maintainer account or '
'rogue insider',
'Exploitation of trusted '
'dependency chains']},
'references': [{'source': 'Researchers (unidentified in description)'}],
'response': {'third_party_assistance': 'Researchers (uncovered the attack)'},
'title': 'Sophisticated npm Supply-Chain Attack Targets Alibaba Developers',
'type': 'Supply-Chain Attack',
'vulnerability_exploited': 'Trusted dependency chains, Node.js sandbox escape '
'technique'}