The latest wave of malicious npm packages, tied to a North Korean campaign known as 'Contagious Interview,' indicates a coordinated effort targeting developers to steal cryptocurrencies.
Phylum pointed out that the newly observed helmet-validate package executes JavaScript from a remote domain, highlighting the evolving tactics of these cyber threats.
[
Collection
]
[
|
...
]