Skip to content
Threat Feed
Subscribe

Product

Postcss-Initial-Provider (3.0.4)

1 brief RSS
high threat

DPRK-Linked Lazarus Group Campaign Distributing Malware via npm Packages

The Lazarus Group is distributing malicious npm packages that use Ethereum blockchain transaction data to resolve C2 infrastructure and download secondary JavaScript payloads.

@kolbo/mcp +5 Lazarus Group +4
3t