#npm-registry

#npm-registry

North Korean threat actors are targeting developers with malicious npm packages to steal cryptocurrency.

The 'Contagious Interview' campaign uses deceptive job offers to compromise software developers. [ more ]

Malicious packages discovered in npm registry by cybersecurity firm Phylum contained hidden command and control functionality within image files. [ more ]

Malicious packages discovered in npm registry containing hidden command and control functionality embedded in image files. [ more ]