Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Introduction In March 2022, cinema-goers across India watched in tense silence as a young Hindu woman sobbed hysterically on screen, recounting graphic atrocities committed by her Muslim neighbours.