Socket.dev blog
North Korean APT Lazarus Targets Developers with Malicious npm Package · 2025-01-29T22:47:16.420Z
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.