| 2025-07-08T10:00:00.000Z | Lazarus Group packages in npm and PyPI (in Q2 2025 Open Source Malware Index) | | Lazarus Group |
| 2025-07-30T10:00:00.000Z | Global Espionage: Lazarus Group Targets OSS Ecosystems | | Lazarus Group |
| 2025-08-27T14:00:00.000Z | North Korean IT operatives infiltrate 320+ companies (CrowdStrike report cited in "AI and Malware: Infiltrating Software Development Teams") | | Famous Chollima; North Korean IT operatives |
| 2026-08-10T16:02:45.000Z | Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads (NullReceiver / Contagious Interview) | | DPRK-linked Contagious Interview campaign; Lazarus APT group |
| 2026-05-21T20:51:42.000Z | Hijacked npm Package Nearly Delivers PolinRider RAT | | PolinRider (APT group linked with North Korea) |
| 2026-06-03T21:16:54.000Z | Lazarus Group's Latest: Brandjacking Campaign on npm | | Lazarus Group |
| (no date on page) | How North Korea-Backed Lazarus Group is Weaponizing Open Source to Target Developers (whitepaper landing page) | | Lazarus Group |