T1657 16
- North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads
- Malicious Chrome Extension Steals MEXC API Keys for Account Takeover
- Malicious NuGet Package Typosquats Popular .NET Tracing Library to Steal Wallet Passwords
- Inside the GitHub Infrastructure Powering North Korea's Contagious Interview npm Attacks
- Malicious Chrome Extension Exfiltrates Seed Phrases, Enabling Wallet Takeover
- North Korea's Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads
- Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
- Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
- Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
- Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages
- Monkey-Patched PyPI Packages Use Transitive Dependencies to Steal Solana Private Keys
- Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads
- Black Basta's Dependency Confusion Ambitions and Ransomware in Open Source Ecosystems
- Lazarus Strikes npm Again with New Wave of Malicious Packages
- Typosquatted Go Packages Deliver Malware Loader Targeting Linux and macOS Systems
- North Korean APT Lazarus Targets Developers with Malicious npm Package