EuRepoC
The North Korean state-aligned hacking group Moonstone Sleet delivered malicious npm packages to a victim with an associated project and stole its credentials · Not available
The North Korean state-aligned hacking group Moonstone Sleet (previously tracked as Storm-1789) delivered malicious npm packages to a victim with an associated project and stole its credentials, Microsoft reported in a technical report on 28 May 2024. In addition to this specific incident, the hacker group is said to have sent malicious npm packages via freelancing websites or other platforms such as LinkedIn to victims who need such files for their projects.