Today's Top #2: North Korean Lazarus hackers infect hundreds via npm packages

tldr; North Korean hacking group Lazarus has been linked to six malicious npm packages designed to steal credentials, deploy backdoors, and extract cryptocurrency data. These packages, downloaded 330 times, use typosquatting to trick developers and include malware like BeaverTail and InvisibleFerret. The campaign, discovered by the Socket Research Team, highlights Lazarus's ongoing use of software registries for supply chain attacks. Developers are urged to scrutinize open-source code to avoid such threats.

*This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR.

https://www.reddit.com/r/CryptoCurrency/comments/1j9a6yw/north_korean_lazarus_hackers_infect_hundreds_via/