North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack Campaign

North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack Campaign

/in

The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing another set of 67 malicious packages to the npm registry, underscoring ongoing attempts to poison the open-source ecosystem via software supply chain attacks.
The packages, per Socket, have attracted more than 17,000 downloads, and incorporate a previously undocumented version of a malware

The Hacker News – ​Read More

Zip Security Raises $13.5 Million in Series A FundingEnterprise Plan: Boost SOC Performance, Reduce Business Risks with ANY.RUNEnterprise Plan: Boost SOC Performance, Reduce Business Risks with ANY.RUN