NPM | lazarus.day

#NPM

Vulnerability

2023-06-23 • Phylum Discovers Sophisticated Ongoing Attack on NPM

155

Tagged Reports
77

Unique Authors
1,121

Active Days

Tagged Reports

2026-07-17

Open Source Malware

ChainVeil and ViteVenom are DPRK’s PolinRider Campaign

#PolinRider #NPM #SupplyChain #ChainVeil #ViteVenom

2026-07-14

Checkmarx

Sequel to ChainVeil npm malware: ViteVenom

#SupplyChain #NPM #ChainVeil #ViteVenom #SuccessKey

2026-07-09

Safe Dep

nodemon-sudo: an npm Backdoor With No Install Script

#NPM #SupplyChain

2026-07-08

Open Source Malware

PolinRider Jumps the Fence

#PolinRider #SupplyChain #NPM #PyPI #VSCode

2026-07-02

Ossprey

How Ossprey uncovered a 300+ package DPRK Contagious-Interview campaign

#ContagiousInterview #BeaverTail #InvisibleFerret #NPM #SupplyChain

2026-06-30

Kudelski Security

How DPRK’s Contagious Interview Campaign Targets Developers

#ContagiousInterview #GitHub #NPM #VSCode #Cryptocurrency #T1027 #T1041 #T1059.001 #T1059.007 #T1071.001 #T1105 #T1204

2026-06-30

Jfrog

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

#Lazarus #SupplyChain #NPM

2026-06-25

Open Source Malware

The OpenSourceMalware Show #10

#Lazarus #SupplyChain #NPM #PyPI #Cryptocurrency #Podcast

2026-06-24

Decryption Digest

Sapphire Sleet: 144 npm Packages Backdoored

#SapphireSleet #Mastra #NPM #SupplyChain #T1195.002 #T1546.004 #T1059.001

2026-06-23

Ossprey

DPRK Contagious Interview: NPMJS chalk-ultra and vitest-cli

#ContagiousInterview #NPM

2026-06-22

Melted In Hex

Dead Drops on the Blockchain: Reversing a DPRK npm Loader (PolinRider / A6-Shadow-15)

#Lazarus #PolinRider #BeaverTail #InvisibleFerret #NPM #EtherHiding

2026-06-18

Tuxcare

Why the Mastra easy-day-js Attack Should Change How Teams Trust npm Packages

#Mastra #NPM #SupplyChain #T1195 #T1195.001 #T1059.007 #T1105

2026-06-18

Open Source Malware

Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier

#Mastra #NPM #SupplyChain #Lazarus #T1195.001 #T1555 #T1105 #T1059.007

2026-06-17

Step Security

Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat

#Mastra #NPM #SupplyChain #T1195 #T1195.001

2026-06-17

Mastra

INCIDENT REPORT: 2026-06-16: Mastra hit by supply-chain attack

#Mastra #SupplyChain #NPM #Phishing #T1195 #T1566

« Back