​

The attack by the Lazarus Group on npm, uncovered by the Socket Research Team, leveraged typosquatting techniques, mimicking trusted JavaScript libraries. This tactic deceived developers into unknowingly downloading malicious packages, leading to the installation of malware.