lazarusholic

Everyday is lazarus.dayβ

Search

Tag

#NPM

Reports

2026-06-17
Microsoft
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
#Mastra #NPM #SapphireSleet
2026-06-17
SafeDep
Mastra npm Scope Takeover: 143 Packages Drop a RAT
#Mastra #NPM
2026-06-16
ESTSecurity
Chai.js 플러그인으로 위장한 북한발 npm 악성 패키지 'chai-as-init' 분석
#ContagiousInterview #NPM
2026-06-03
Sonatype
Lazarus Group's Latest: Brandjacking Campaign on npm
#NPM #Lazarus
2026-05-22
Dshield
Cross-Platform NPM Stealer
#NPM #OtterCookie
2026-05-20
OxSecurity
North Korean-Linked Threat Actor Targets Developers with New npm Infostealer RAT
#NPM
2026-05-19
OSM
Axios attacker strikes again! Three NPM packages have been hiding in plain sight for two months
#Axios #NPM #UNC1069
2026-05-14
OSM
How malware abuses npm lifecycle scripts and VS Code tasks
#Axios #NPM #TasksJacker
2026-04-24
Panther
Inside DPRK's npm malware factory: 108 packages, 261 versions, and a 31-day campaign wave
#BeaverTail #NPM
2026-04-17
Igloo
Supply Chain Attack on Axios NPM Package via North Korean Threat Actors
#Axios #NPM
2026-04-10
Panther
Polymarket Trader Funds at Risk: DPRK npm Package Steals Wallet Keys and Installs SSH Backdoor
#FamousChollima #NPM
2026-04-07
eSentire
Examining the Blast Radius from the Axios npm Supply Chain Compromise
#Axios #NPM #WAVESHAPER
2026-04-07
Panther
Tracking an OtterCookie Infostealer Campaign Across npm
#ContagiousTrader #NPM #OtterCookie
2026-04-07
NKInternet
npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things
#ITWorker #NPM #Deepfake
2026-04-06
PolySwarm
The Axios Breach: When npm Trust Becomes an APT Attack Vector
#Axios #NPM #UNC1069
2026-04-03
DCSO
From Axios NPM Supply Chain Attack to Tracking DPRK’s BlueNoroff
#Axios #BlueNoroff #NPM
2026-04-03
CiscoTalos
Axios NPM supply chain incident
#Axios #NPM
2026-04-03
NVISO
Axios npm attack: rapid hunting with KQL and response guide
#Axios #NPM
2026-04-02
SafeDep
Malicious npm Package express-session-js Drops Full RAT Payload
#ContagiousInterview #NPM
2026-04-02
Socket
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
#Axios #NPM
2026-04-02
AxiosHttp
Post Mortem: axios npm supply chain compromise
#Axios #NPM
2026-04-01
Bitdefender
Axios npm Supply Chain Attack - Cross-Platform RAT Deployed via Compromised Maintainer Account
#Axios #NPM
2026-04-01
CybersecSentinel
Axios npm Backdoored: UNC1069 Deploys Cross-Platform RAT via Supply Chain Attack
#Axios #NPM #UNC1069
2026-04-01
CrowdStrike
STARDUST CHOLLIMA Likely Compromises Axios npm Package
#Axios #NPM #StardustChollima
2026-04-01
Microsoft
Mitigating the Axios npm supply chain compromise
#Axios #NPM #SapphireSleet
2026-04-01
Google
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
#Axios #NPM #UNC1069 #WAVESHAPER
2026-03-31
LegitSecurity
Axios Hijacked: npm Account Takeover Deploys Cross-Platform RAT to Millions
#Axios #NPM
2026-03-31
PicusSecurity
Axios npm Supply Chain Attack: Cross-Platform RAT Delivery via Compromised Maintainer Credentials
#Axios #NPM
2026-03-31
Wiz
Axios NPM Distribution Compromised in Supply Chain Attack
#Axios #NPM
2026-03-31
TrendMicro
Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads
#Axios #NPM
2026-03-31
Sophos
Axios npm package compromised to deploy malware
#Axios #NPM
2026-03-31
OxSecurity
Attackers Compromised Axios, NPM Package With Over 100M Weekly Downloads, Rotate Your Keys Now
#Axios #NPM
2026-03-31
Derp
Axios npm compromise: XOR dropper to cross-platform RAT
#Axios #NPM
2026-03-31
SafeDep
axios Compromised: npm Supply Chain Attack via Dependency Injection
#Axios #NPM
2026-03-31
Snyk
Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT
#Axios #NPM
2026-03-31
N3mes1s
Axios npm Supply Chain Compromise (2026-03-31) — Full RE + Dynamic Analysis + BlueNoroff Attribution
#Axios #BlueNoroff #NPM
2026-03-31
Huntress
Supply Chain Compromise of axios npm Package
#Axios #NPM
2026-03-31
Koi
axios Compromised: A Supply Chain Attack on npm's Most Popular HTTP Client
#Axios #NPM
2026-03-31
SOCRadar
Axios npm Hijack 2026: Everything You Need to Know – IOCs, Impact & Remediation
#Axios #NPM
2026-03-31
Datadog
Compromised axios npm package delivers cross-platform RAT
#Axios #NPM
2026-03-31
ThreatBook
Lazarus Group Poisons Axios: Inside the npm Supply Chain Attack
#Axios #Lazarus #NPM #WAVESHAPER
2026-03-31
Socket
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
#Axios #NPM
2026-03-31
StepSecurity
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan
#Axios #NPM
2026-03-30
Aikido
axios compromised on npm: maintainer account hijacked, RAT deployed
#Axios #NPM
2026-03-13
Kmsec
First instance of PylangGhost RAT observed on npm
#FamousChollima #PylangGhost #NPM
2026-02-27
Socket
StegaBin: 26 Malicious npm Packages Use Pastebin Steganograp...
#ContagiousInterview #FamousChollima #NPM #Steganography #StegaBin
2026-01-19
Kmsec
npm package bigmathix and the BigSquatRat campaign behind it
#BigSquatRat #Suspicious
2025-11-26
Socket
Inside the GitHub Infrastructure Powering North Korea’s Contagious Interview npm Attacks
#ContagiousInterview #NPM #OtterCookie
2025-11-20
Jfrog
New Crypto Stealer on npm. A Two-Part Attack
#NPM
2025-10-10
Socket
North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads
#ContagiousInterview #NPM
2025-07-15
Socket
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
#ContagiousInterview #NPM #XORIndex
2025-06-25
Socket
Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages
#BeaverTail #ContagiousInterview #HexEval #NPM
2025-04-09
Veracode
Resurgent North Korean Malware Campaign in npm
#Lazarus #NPM
2025-04-04
Socket
Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads
#BeaverTail #ContagiousInterview #Lazarus #NPM
2025-03-17
Logpresso
북한 라자루스(Lazarus) 그룹이 배포한 악성 npm 패키지 감염 사례
#Lazarus #NPM
2025-03-10
ronxjansen
Npm Run Hack:Me - A Supply Chain Attack Journey
#ContagiousInterview
2025-03-10
Socket
Lazarus Strikes npm Again with New Wave of Malicious Package
#Lazarus #NPM
2025-02-13
SecurityScorecard
Lazarus Group Targets Developers Through NPM Packages and Supply Chain Attacks
#Lazarus #MarstechMayhem #NPM
2025-01-29
Socket
North Korean APT Lazarus Targets Developers with Malicious npm Package
#Lazarus #NPM
2024-08-29
Phylum
North Korea Still Attacking Developers via npm
#ContagiousInterview #MoonstoneSleet #NPM
2024-08-24
Hackhunting
Software Supply Chain Threat Landscape July 2024: PyPI, NPM, GitHub and macOS
#NPM #PyPI
2024-08-07
Checkmarx
A Year-Long Campaign of North Korean Actors Targeting Developers via Malicious npm Packages
#NPM
2024-08-01
Datadog
Stressed Pungsan: DPRK-aligned threat actor leverages npm for initial access
#NPM #StressedPungsan
2024-07-24
Stacklok
North Korean State Actors Exploit Open Source Supply Chain via Malicious npm Package
#NPM
2024-04-24
Phylum
Nation-State Threat Actors Renew Publications to npm
#NPM #macOS
2024-01-05
Phylum
Update to November’s Crypto-Themed npm Attack
#SupplyChain #NPM
2023-12-08
Qianxin
疑似Lazarus（APT-Q-1）涉及npm包供应链的攻击样本分析
#NPM #APT-Q-1
2023-11-04
Phylum
Crypto-Themed npm Packages Found Delivering Stealthy Malware
#SupplyChain #NPM
2023-07-27
ReversingLabs
More malicious npm packages found in wake of JumpCloud supply chain hack
#JumpCloud #NPM
2023-07-22
Phylum
June’s Sophisticated npm Attack Attributed to North Korea
#NPM
2023-07-06
ReversingLabs
Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks
#Brainleeches #NPM
2023-06-23
Phylum
Phylum Discovers Sophisticated Ongoing Attack on NPM
#NPM