Developer Security

Lazarus Group’s Covert Supply Chain Attack: North Korean APT Poisons Open Source to Steal Developer Secrets Lazarus Group Moobot botnet Ransomware War

Lazarus Group Moobot botnet Ransomware War

Lazarus Group’s Covert Supply Chain Attack: North Korean APT Poisons Open Source to Steal Developer Secrets

ddos August 5, 2025

In the first half of 2025, Sonatype uncovered a large-scale, ongoing assault on the open-source software ecosystem,...

npm Supply Chain Attack Exposes Devs to “Scavenger” Malware Via Phished Accounts

npm Supply Chain

npm Supply Chain Attack Exposes Devs to “Scavenger” Malware Via Phished Accounts

ddos July 25, 2025

A major incident has rocked the npm ecosystem: the widely-used package eslint-config-prettier suddenly received an update devoid...