2026-06-03 (Back to Inventory) Lazarus Group's Latest: Brandjacking Campaign on npm Author(s): Sonatype Security Research Team Organization: sonatype Open article directly Related Articles 2022-08-11 ⋅ sonatype ⋅ Ax Sharma PyPI Package 'secretslib' Drops Fileless Linux Malware to Mine Monero 2022-05-20 ⋅ sonatype ⋅ Ax Sharma New 'pymafka' malicious package drops Cobalt Strike on macOS, Windows, Linux Cobalt Strike 2021-10-20 ⋅ sonatype ⋅ Sonatype Security Research Team Newly Found npm Malware Mines Cryptocurrency on Windows, Linux, macOS Devices