lazarusholic

Everyday is lazarus.dayβ

Socket

@SocketSecurity, https://socket.dev

Reports

2026-05-31
Socket
Famous Chollima Targets PHP Developers Through Compromised Packagist Package
#ContagiousInterview #FamousChollima
2026-04-07
Socket
North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads
#ContagiousInterview
2026-04-03
Socket
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
#Axios #NPM
2026-04-02
Socket
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
#Axios #NPM
2026-04-01
Socket
The Hidden Blast Radius of the Axios Compromise
#Axios #NPM
2026-03-31
Socket
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
#Axios #NPM
2026-02-27
Socket
StegaBin: 26 Malicious npm Packages Use Pastebin Steganograp...
#ContagiousInterview #FamousChollima #NPM #Steganography #StegaBin
2025-11-26
Socket
Inside the GitHub Infrastructure Powering North Korea’s Contagious Interview npm Attacks
#ContagiousInterview #NPM #OtterCookie
2025-10-10
Socket
North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads
#ContagiousInterview #NPM
2025-07-15
Socket
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
#ContagiousInterview #NPM #XORIndex
2025-06-25
Socket
Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages
#BeaverTail #ContagiousInterview #HexEval #NPM
2025-04-04
Socket
Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads
#BeaverTail #ContagiousInterview #Lazarus #NPM
2025-03-10
Socket
Lazarus Strikes npm Again with New Wave of Malicious Package
#Lazarus #NPM
2025-01-29
Socket
North Korean APT Lazarus Targets Developers with Malicious npm Package
#Lazarus #NPM