Report: Lazarus Group Exploits Github, NPM Packages in Cryptocurrency Malware Campaign   

A state-aligned cyber collective from North Korea has compromised Github repositories and NPM modules with stealthy malicious code to pilfer digital currencies, per a Securityscorecard STRIKE Team analysis. Security Researchers Warn of Rising Open-Source Malware Attacks Linked to Lazarus Group As detailed by a Computing.co.uk report, the Lazarus Group injected harmful Javascript into Github projects