Phemex GoPlus Alerts on 26 Malware Packages from North Korean Hackers
Article Content
Browse articles 
GoPlus has issued a warning regarding 26 malware packages released by North Korean hackers on the npm registry. These packages include an installation script that executes malicious code, which downloads and runs a Remote Access Trojan (RAT). Users of the npm registry are advised to be cautious and avoid these packages.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
Timeline
2026-03-03
GoPlus issues warning about 26 malware packages
2026-03-03
Malicious code identified in 'vendor/scrypt-js/version.js'
2026-03-03
Remote Access Trojan (RAT) downloaded via malicious URL
More articles in this cluster (3)
Following this threat?
Track FAMOUS CHOLLIMA in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
North Korean Fake IT Workers Infiltrate US Companies US authorities have revealed a network linked to North Korea that infiltrated approximately 70 US companies using fake employees. These operatives applied for remote IT positions, utilizing fabricated identities and sophisticated techniques to gain access to internal systems. The FBI has issued alerts highlighting the… 
US Disrupts North Korean Laptop Farms Generating $3 Million in Fraud The US Department of Justice has arrested two US nationals, Michael James Bostelle and Juan Cecilio Pena Carrillo, for their roles in a scheme that facilitated North Korean IT workers to obtain remote jobs at US companies using stolen identities. This operation, named 'Operation Lonestar Roundup', involved raids on…