Back Thehackernews

Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems

Thehackernews • February 12, 2026

Join Wiz experts to see how AI and context-aware forensics make cloud investigations faster, clearer, and more reliable.

Quantum computers could soon break today’s encryption—join Zscaler’s webinar to learn how post-quantum cryptography keeps your data safe for the future.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Cybersecurity Incidents and Vulnerabilities Reported in February 2026 In February 2026, various cybersecurity incidents were reported, including the exploitation of Ivanti EPMM vulnerabilities linked to a single IP address and the discovery of malicious packages by the Lazarus group in npm and PyPI ecosystems. Additionally, Microsoft issued patches for 59 vulnerabilities, including six that were actively exploited. APT36 and SideCopy also launched new cross-platform attacks. 52 sources 45

Extracted Entities

Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)