DPRK-aligned social engineering campaign against Node.js maintainers (mentioned in Series C announcement)

Date (as written): 2026-05-20T15:25:11.368Z
Year: 2026
Actors (as written): DPRK-aligned attackers
Actor pages: DPRK-aligned attackers
Tags (as written): Node.js maintainers

Source entries (1)

Socket.dev blog

DPRK-aligned social engineering campaign against Node.js maintainers (mentioned in Series C announcement) · 2026-05-20T15:25:11.368Z

DPRK-aligned attackers ran a social engineering campaign against Node.js maintainers, including several Socket engineers, and the same playbook compromised Axios .

https://socket.dev/blog/series-c

Suggest a correction on GitHub