Do Son North Korean APTs added 197 malicious npm packages to the "Contagious Interview" campaign. The operation uses fake crypto job assignments to deploy the OtterCookie/BeaverTail hybrid to steal credentials cross-platform.
NPM Supply Chain
A new report reveals a supply chain attack on Ethereum. Four malicious npm packages impersonating Flashbots were used to steal private keys and mnemonic seeds from developers.
Uncover the year-long NPM supply chain attack involving the malicious @0xengine/xmlrpc package. Learn how it combined cryptocurrency mining with data theft.