Lazarus Group Deploys Malicious npm Packages to Steal Credentials and Crypto Data
North Korea’s state-backed hacking group, Lazarus, has launched a fresh supply chain attack, injecting six malicious npm packages designed to steal credentials and exfiltrate cryptocurrency data. The campaign, uncovered by the Socket Research Team, leverages BeaverTail malware to infiltrate...