[H4ckN3ws]Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems

[ThaHaka 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

Cybersecurity researchers have discovered a fresh set of malicious packages across npm and the Python Package Index (PyPI) repository linked to a fake recruitment-themed campaign orchestrated by the North Korea-linked Lazarus Group. The coordinated campaign has been codenamed graphalgo in reference to the first package published in the npm registry. It's assessed to be active since May 2025. "

This is the hidden content, please

• Sign In
• or
• Sign Up