HomeAI · summaries
Storia in 3 fonti
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
Confronto fonti
3 prospettive sulla stessa storiaTimeline cronologica
- ·
thenextweb.com
North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets
Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.
- ·
thehackernews.com
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
- ·
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
- ·
securityweek.com
North Korean Hackers Target Open Source Developers in Supply Chain Attacks
North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a broad supply chain campaign dubbed PolinRider.