Socket

#ContagiousInterview #NPM #OtterCookie #T1204.005 #T1036 #T1555.001 #T1587 #T1583.006 #T1082 #T1119 #T1585 #T1547.001 #T1005 #T1059.007 #T1587.001 #T1539 #T1041 #T1113 #T1656 #T1608.001 #T1204.002 #T1571 #T1105 #T1195.002 #T1115 #T1083 #T1583.001 #T1497 #T1546.016 #T1555.003 #T1056.001 #T1657 #T1217

2025-10-10

Socket

North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads

#ContagiousInterview #NPM #T1119 #T1005 #T1059.007 #T1082 #T1083 #T1555.001 #T1041 #T1027.013 #T1546.016 #T1608.001 #T1204.002 #T1555.003 #T1105 #T1657 #T1217 #T1195.002

2025-07-15

Socket

Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader

#ContagiousInterview #NPM #XORIndex #T1119 #T1005 #T1059.007 #T1082 #T1083 #T1555.001 #T1041 #T1027.013 #T1546.016 #T1608.001 #T1204.002 #T1555.003 #T1105 #T1657 #T1217 #T1195.002

2025-06-25

Socket

Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages

#BeaverTail #ContagiousInterview #HexEval #NPM #T1119 #T1005 #T1059.007 #T1082 #T1083 #T1555.001 #T1041 #T1027.013 #T1546.016 #T1608.001 #T1204.002 #T1555.003 #T1056.001 #T1105 #T1657 #T1217 #T1195.002

2025-04-04

Socket

Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads

#BeaverTail #ContagiousInterview #Lazarus #NPM

2025-03-10

Socket

Lazarus Strikes npm Again with New Wave of Malicious Package

#Lazarus #NPM #T1119 #T1005 #T1059.007 #T1082 #T1083 #T1555.001 #T1041 #T1027.013 #T1546.016 #T1608.001 #T1204.002 #T1555.003 #T1105 #T1657 #T1217 #T1195.002

2025-01-29

Socket

North Korean APT Lazarus Targets Developers with Malicious npm Package

#Lazarus #NPM

Published Reports

Top Tags

Top Actors

Cluster Coverage

140+ Mastra npm Packages Compromised in Coordinated Supply Chain Attack

Famous Chollima Targets PHP Developers Through Compromised Packagist Package

North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads

Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign

Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise

The Hidden Blast Radius of the Axios Compromise

Supply Chain Attack on Axios Pulls Malicious Dependency from npm

StegaBin: 26 Malicious npm Packages Use Pastebin Steganograp...

Inside the GitHub Infrastructure Powering North Korea’s Contagious Interview npm Attacks

North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads

Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader

Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages

Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads

Lazarus Strikes npm Again with New Wave of Malicious Package

North Korean APT Lazarus Targets Developers with Malicious npm Package