New Moonstone Sleet North Korean Actor Deploying Malicious Open Source Packages

In December 2023, we reported on how North Korean threat actors, particularly Jade Sleet, have been compromising supply chains through the open-source ecosystem. One of their key tactics is the exploitation of the public npm registry to distribute malicious packages. Despite the increased exposure and attention this issue has received through our research and that […]

The post New Moonstone Sleet North Korean Actor Deploying Malicious Open Source Packages appeared first on Cyber Security News.

actor attention cyber security december december 2023 ecosystem exploitation exposure issue key malicious malicious packages moonstone sleet north north korean north korean threat actors npm open source open source packages packages public registry sleet supply supply chains tactics threat threat actors