Re:NPM attack targets Zapier and security tool browser exten...
by 6mile on Thursday June 18, 2026 @03:58PM
(#48590683)
NPM attack targeting Mastro targets browser extensions other than crypto wallets.
- Credential managers and MFA authenticators from LastPass, Bitwarden, 1Password, Deloitte, Dashlane, ExpressVPN, KeePass, Proton, Kaspersky, passbolt, NordPass, Zoho, etc.
- Zapier browser extension. Assuming this is to gain access to platforms the victim has integrated with Zapier
- Credential managers and MFA authenticators from LastPass, Bitwarden, 1Password, Deloitte, Dashlane, ExpressVPN, KeePass, Proton, Kaspersky, passbolt, NordPass, Zoho, etc. - Zapier browser extension. Assuming this is to gain access to platforms the victim has integrated with Zapier