Lucide Proxy: Turning Student Web Proxies into DDoS Bots

Reported 14 Jul 2026 by otx · Severity: medium

A sophisticated campaign deployed 148 malicious npm packages disguised as student web proxy applications under brands like Riverbend Tutoring and Northstar Tutoring. Published by accounts terminal3airport and eerikakirk, these packages weaponized visitor browsers into distributed