Checkmarx blog (3)
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| December 12, 2023 | How one country is impacting supply chains (North Korean supply chain attacks; Contagious Interview) | North Korean state-sponsored groups; Lazarus group | |
| November 1, 2023 | Lazarus npm package-pair campaign against blockchain and cryptocurrency sectors (in "The mosaic of 2023's Software Supply Chain threats") | Lazarus | |
| June 13, 2024 | A New North Korean Group Emerges, Disrupting the Open-Source Ecosystem (Moonstone Sleet npm packages) | Moonstone Sleet; Jade Sleet |