Alerts Events DCR

Go to listing page

North Korean Cyber Espionage Group Tenacious Pungsan Compromises Open-Source Repositories with Backdoored npm Packages

Threat Actors
October 28, 2024
Security Online

The group used name-squatting attacks on popular open-source software repositories to distribute backdoored versions of npm packages like passports-js and bcrypts-js, containing malicious JavaScript code.

North Korean hackers
Cyber Espionage Attacks
Tenacious Pungsan
open source software
Software developers

Publisher