Sonatype
How North Korea-Backed Lazarus Group is Weaponizing Open Source to Target Developers (whitepaper landing page) · (no date on page)
Sonatype’s latest whitepaper delivers an in-depth analysis of a rapidly escalating campaign by the North Korea-backed Lazarus Group. In just the first half of 2025, Sonatype's automated threat detection uncovered 234 unique malware packages embedded in open source registries — all attributed to Lazarus and targeting software engineers, CI/CD pipelines, and developer environments.