Lazarus Strikes npm Again with New Wave of Malicious Packages

stapp · Mar 11, 2025

North Korea’s Lazarus Group continues to infiltrate the npm ecosystem, deploying six new malicious packages designed to compromise developer environments, steal credentials, extract cryptocurrency data, and deploy a backdoor. In this campaign, Socket researchers uncovered BeaverTail malware embedded within seemingly benign packages....
Click to expand...

https://socket.dev/blog/lazarus-strikes-npm-again-with-a-new-wave-of-malicious-packages

Log in or Sign up

Lazarus Strikes npm Again with New Wave of Malicious Packages

stapp Global Moderator

Log in or Sign up

Lazarus Strikes npm Again with New Wave of Malicious Packages

stapp Global Moderator

Useful Searches