Lazarus Group Uses GitHub, npm, PyPI for 'Graphalgo' Malware Campaign

Back Cyberpress

Lazarus Group Uses GitHub, npm, PyPI for 'Graphalgo' Malware Campaign

Cyberpress • February 13, 2026

Share: View original

A recent cybersecurity report from ReversingLabs has uncovered a new malware campaign launched by the North Korean hacker group Lazarus.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Lazarus Group's Graphalgo Campaign Targets Developers with Malware via Fake Job Offers The Lazarus Group, a North Korean hacking team, has initiated a fake recruiter campaign named 'Graphalgo' targeting cryptocurrency developers. Active since May 2025, this operation utilizes fraudulent job offers to distribute remote access trojans through platforms like GitHub, npm, and PyPI, affecting developers in the blockchain and cryptocurrency sectors. 7 sources 40

Extracted Entities

APT Groups (1)

Attack Types (1)

Campaigns (2)

Graphalgo Graphalgo Malware Campaign

Platforms (2)

Tools (1)