North Korean Hackers Release Malware-Ridden Packages Into Npm Registry

Security Agencies Warn Canadians About Unknowingly Hiring Remote North Korean IT Workers

Canadian authorities have issued a warning about the dangers of hiring remote IT professionals who could be North Korean state-affiliated workers, posing as freelancers with a strong technical skill set and hiding their identity. A joint advisory was issued by the RCMP, Public Safety Canada, Global Affairs Canada, the Financial Transactions and Reports Analysis Centre of Canada, and the Canadian Centre for Cyber Security on July 16 warning Canad…

North Korean hackers release malware-ridden packages into npm registry

A second wave of tainted packages was spotted on npm, likely part of a larger campaign.

North Korean XORIndex malware hidden in 67 malicious npm packages

North Korean threat actors planted 67 malicious packages in the Node Package Manager (npm) online repository to deliver a new malware loader called XORIndex to developer systems.

67 malicious npm packages, novel loader spread North Korean malware

Packages that load BeaverTail malware were downloaded more than 17,000 times. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor…

North Korean Hackers Exploit 67 Malicious npm Packages to Spread XORIndex Malware

The Socket Threat Research Team has discovered a new software supply chain attack that uses a malware loader called XORIndex that had not been previously reported, marking a major uptick in North Korean cyber operations. This activity builds on the Contagious Interview campaign previously detailed in June 2025, which involved the HexEval Loader. The adversaries, […] The post North Korean Hackers Exploit 67 Malicious npm Packages to Spread XORInd…

North Korean Actors Expand Contagious Interview Campaign with New Malware Loader

Socket has identified a new malware loader called XORIndex incorporated into malicious packages published to the npm registry, with over 9000 downloads so far This article has been indexed from www.infosecurity-magazine.com Read the original article: North Korean Actors Expand Contagious… Read more → The post North Korean Actors Expand Contagious Interview Campaign with New Malware Loader appeared first on IT Security News.