North Korean Hackers Suspected in New Wave of Malicious npm Packages

The npm package registry has emerged as the target of yet another highly targeted attack campaign that aims to entice developers into downloading malevolent modules.
Software supply chain security firm Phylum told The Hacker News the activity exhibits similar behaviors to that of a previous attack wave uncovered in June, which has since been linked to North Korean threat actors.
As many as nine

attack campaign developers hacker hackers malicious malicious npm modules north north korean north korean hackers npm npm package package packages phylum registry security software software supply chain software supply chain security supply supply chain supply chain security target targeted attack uncovered