North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup…
Tag: Ethereum
North Korean Cyber Operations Linked to NullReceiver
North Korean threat actors have been linked to the NullReceiver campaign, which uses trojanized npm packages to deploy malware that decodes C2…
Miasma Malware: Multi-Stage Botnet Loader with Advanced C2 Capabilities
Miasma is a multi-stage botnet loader identified in compromised AsyncAPI npm packages. It features a tasking framework with 744 modules, supporting six…
Sonatype Finds NullReceiver in npm Packages
Sonatype identified six npm packages using Ethereum transactions to fetch malware, a technique called NullReceiver linked to North Korean actors.