Cryptocurrency Providers · 27/07/2023
Researchers from ReversingLabs uncover evidence of more malicious npm packages, with links to the infrastructure used to launch the attack against JumpCloud, which also appear to target cryptocurrency providers. [Date Occurred: Since 11/07/2023; Date Discovered: -]
More malicious npm packages found in wake of JumpCloud supply chain hack · 2023-07-27T05:00:00.000Z
ReversingLabs researchers uncovered evidence of more malicious npm packages beyond those already disclosed — and conclude that the attack is still active. ... Crowdstrike, SentinelOne and others attributed the attack to state-sponsored actors working on behalf of the government of North Korea. While the data collected by ReversingLabs is inconclusive, a growing body of evidence points to North Korea.