Checkmarx blog
Lazarus npm package-pair campaign against blockchain and cryptocurrency sectors (in "The mosaic of 2023's Software Supply Chain threats") · November 1, 2023
the nation-state actor, Lazarus, which conducted a highly targeted campaign on the blockchain and cryptocurrency sectors. ... The Lazarus group implemented this tactic in their recent assault campaign. ... In this instance, the malicious packages were designed to function in pairs and in a sequential manner.