MALWARE HIDING IN PLAIN SIGHT: SPYING ON NORTH KOREAN HACKERS

Summary from the TLDR Web Dev newsletter

A malware analysis engine detected a malicious NPM package, react-html2pdf.js, uploaded by North Korean hacking group Lazarus. The attackers attempted to hide malicious code within the package with the aim of stealing crypto wallets, browser caches, and keychains while also downloading additional payloads. An analysis showed the attackers' debugging process in real-time.