North Korea's Hackers Hit 1,700 Malicious Packages Across npm, PyPI, Go, and Rust
North Korean hackers just unleashed 1,700 malicious packages across major repositories like npm and PyPI. But the real shock? They're now hitting Go and Rust too, turning trusted dev tools into malware loaders.
⚡ Key Takeaways
- Contagious Interview spread 1,700 malicious packages across npm, PyPI, Go, Rust, and PHP, impersonating dev tools as malware loaders. 𝕏
- Shift to Go and Rust signals maturing supply chain attacks targeting high-growth, secure ecosystems. 𝕏
- Organizations must audit deps now—expect 'pkg wars' escalation in 2025 with broader lang coverage. 𝕏
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by The Hacker News
Related Stories
Nation-State Threats
US FBI's Daring Router Raid Crushes Russia's DNS Spy Network
Nation-State Threats
Iran's Hackers Gut US Water Plants—Via Exposed PLCs
Nation-State Threats
Iran's Hackers Crack Open America's Industrial Controls
Nation-State Threats