Snyk
Snyk Vulnerability Database: Malicious Package in xml2yaml (npm) · published 4 Aug 2023
Malicious Package in xml2yaml ... This package is part of an Open Source Supply Chain Attack campaign conducted by the Lazarus Group. The threat actors initiated the attack chain by impersonating developers and recruiters to target employees of technology firms, focused on individuals associated with the blockchain, cryptocurrency, and online gambling sectors.