Veracode blog (incl. migrated Phylum research posts)
Resurgent North Korean Malware Campaign in npm · 2025-04-09T15:45:00+00:00
And speaking of folks who are back and ready for action, the North Korean attackers behind the crypto wallet stealer campaign we wrote about in February of 2024 and again in May of 2024 are back at it with a new batch of malicious npm packages.