HomeAI · summaries
Storia in 2 fonti
North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.
Confronto fonti
2 prospettive sulla stessa storiaTimeline cronologica
- ·
thenextweb.com
North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.
- ·
thehackernews.com
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
- ·
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.