Datadog Security Labs
Tenacious Pungsan npm campaign (in Datadog threat roundup Q4 2024) · 2025-01-24T00:00:00Z
We also identified a new campaign by the DPRK-linked threat actor Tenacious Pungsan . Similar to the activity conducted by MUT-8694, this campaign involved impersonating popular npm packages and deploying infostealer malware to Windows machines.