​

The attack by the Lazarus Group, uncovered by the Socket Research Team, affected at least 330 developers who unknowingly downloaded the malicious npm packages before they were identified and reported