Veracode blog (incl. migrated Phylum research posts)
nebourhood npm packages (react-dom-production-script, hardhat-daemon) (in Q2 2024 Evolution of Software Supply Chain Security Report) · 2024-07-31T20:24:00+00:00
By some estimates, North Korean actors have stolen an estimated $4 billion from financial and cryptocurrency groups. ... In April 2024, Phylum’s automated risk detection platform identified new malicious npm packages linked to North Korean state actors. The threat actor, using the username nebourhood , published react-dom-production-script and hardhat-daemon , which included a preinstall hook to execute the obfuscated deference.js script, delivering malware.