DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Lazarus Group's Latest: Brandjacking Campaign on npm

Date (as written)
2026-06-03T21:16:54.000Z
Year
2026
Actors (as written)
Lazarus Group
Actor pages
Lazarus Group
Tags (as written)
npm developers

Source entries (1)

Sonatype

Lazarus Group's Latest: Brandjacking Campaign on npm · 2026-06-03T21:16:54.000Z
Sonatype Security Research is tracking a Lazarus Group npm campaign using dozens of malicious packages to abuse developer trust and deliver follow-on payloads.
https://www.sonatype.com/blog/lazarus-groups-latest-brandjacking-campaign-on-npm

Suggest a correction on GitHub