The Lazarus Group, a North Korean hacking organization, has intensified its activities within the npm registry, deploying six new malicious packages aimed at deceiving software developers. According to cybersecurity firm Socket, these packages are designed to disrupt workflows and steal credentials. This latest campaign follows previous incidents where the group has impersonated legitimate npm packages, raising concerns about the security of the platform. Additionally, during a recent G7 foreign ministers' meeting, there were discussions condemning North Korea's military support to Russia and expressing serious concerns over its cryptocurrency theft activities.
🤯 Apparently North Korean hackers (Lazarus group) is naming packages to impersonate my npm packages now... https://t.co/xfVLgtrJxQ
Cointelegraph: "Crypto founders report deluge of North Korean fake Zoom hacking attempts" https://t.co/ucwPAgdA1F
G7 ministers call for N. Korea to abandon its nuclear arms, decries N.K. military aid to Russia https://t.co/FKC30Qgiy6