​

The attack by the Lazarus Group, uncovered by the Socket Research Team, suggested that their supply chain attacks on npm are part of a broader strategy, reflecting their continued efforts to exploit open-source ecosystems