Sonatype
Global Espionage: Lazarus Group Targets OSS Ecosystems · 2025-07-30T10:00:00.000Z
Sonatype's automated malware detection systems uncovered a massive and ongoing infiltration of open source ecosystems by the North Korea-backed Lazarus Group, exposing a chilling truth: open source software is now a central battleground in geopolitical cyber conflict . ... Between January and July 2025, Sonatype blocked 234 unique malware packages traced to Lazarus across npm and PyPI. ... The campaign reveals over 36,000 potential victims — and counting.