​

  • News event
  • Claim

Name

North Korea’s Lazarus Group has been linked to six new malicious npm packages

Description

North Korea’s Lazarus Group has been linked to a new attack, accused of infiltrating six malicious npm packages designed to steal credentials and deploy backdoors, impacting JavaScript developers worldwide.

Types

News event
Claim

Event date

1:30pm, Tuesday, March 11, 2025

Quotes that support claims

In a new attack, North Korea's Lazarus group has been linked to six fresh malicious npm packages
Six malicious packages have been identified on npm (Node package manager) linked to the notorious North Korean hacking group Lazarus
North Korea’s Lazarus Group continues to infiltrate the npm ecosystem, deploying six new malicious packages designed to compromise developer environments, steal credentials, extract cryptocurrency data, and deploy a backdoor

Related projects

Lazarus Group
Socket

Tags

Week 11 of 2025
03/11/2025

Referenced by

Summary

Crypto news

Data block