Skip to content
North Korean Hackers Deploy 200 Malicious NPM Packages Targeting Developers

North Korean Hackers Deploy 200 Malicious NPM Packages Targeting Developers

First seen 8 Dec 2025, 17:49 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

North Korean hackers have compromised the npm ecosystem by distributing nearly 200 malicious JavaScript packages aimed at developers. These packages are part of an ongoing campaign to exploit vulnerabilities and gain unauthorized access to development environments. The attack highlights the persistent threat posed by state-sponsored hacking groups in the software development community.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 217d ago How this analysis works

More articles in this cluster (1)