DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Malicious packages on the npm package manager

Date (as written)
2023
Year
2023
Actors (as written)
Lazarus Group
Actor pages
Lazarus Group
Tags (as written)
supply chain attack; malicious packages

Source entries (1)

UN Panel of Experts S/2024/215

Malicious packages on the npm package manager · 2023
Para 139: “In multiple reports in 2023 it was similarly noted that the Lazarus Group had likely published multiple malicious packages on a repository for the JavaScript programming language, npm package manager (see annexes 59, 94 and 95).”
https://undocs.org/S/2024/215

Suggest a correction on GitHub