Fake Roblox packages target npm with Luna Grabber info-stealing

ReversingLabs identified more than a dozen malicious packages targeting Roblox users on the npm public repository, recalling an attack from 2021.

Threat and Vulnerability Roundup August 20th to 26th

Tomislav Pericin (@ap0x) / X

Attackers use JavaScript URLs, API forms and more to scam users in popular online game “Roblox”

Page 18 – .:: CHASLES CORP. ::.

Fake npm Roblox API Package Installs Ransomware and Has a Spooky Surprise

2023 Threat Report Compilation: September Update, by Jennifer Wennekers, Oct, 2023

Luna Grabber Malware Hits Roblox Devs Through npm Packages

Scam, Roblox Wiki

Roblox Game Devs Duped by Malicious npm Packages

ReversingLabs on LinkedIn: #fsisacsummit

Malicious packages in npm enable theft of Discord tokens