North Korean hacking group Lazarus is exploiting the npm software library through malicious code disguised as legitimate packages. These packages can infiltrate developers’ systems to steal login details, cryptocurrency data, and maintain long-term access. While the identified packages have been removed, it is advised that developers verify package sources before downloading, use security tools to detect harmful dependencies and establish a multi-layered security approach.
Jaguar Land Rover Allegedly Hacked
A threat actor named “Rey” has allegedly breached Jaguar Land Rover, leaking around 700 documents that include proprietary source code, operational data, and an employee
