​

  • Claim

Name

The attack by the Lazarus Group, uncovered by the Socket Research Team, affected at least 330 developers who unknowingly downloaded the malicious npm packages before they were identified and reported

Types

Claim

Quotes that support claims

The packages, which have been downloaded 330 times, are designed to steal account credentials, deploy backdoors on compromised systems, and extract sensitive cryptocurrency information
The packages have been collectively downloaded over 330 times
The six new packages — collectively downloaded over 330 times — closely mimic the names of widely trusted libraries, employing a well-known typosquatting tactic used by Lazarus-linked threat actors to deceive developers

Related projects

Socket
Lazarus Group

Referenced by

Summary

Crypto news

Data block