npm Supply Chain

North Korea's WaterPlum Infected 30,000 Developer PCs With Poisoned npm Packages and VS Code Projects, Seven Agencies Warn

Japan, US, Australian and German agencies say DPRK's WaterPlum hit 30,000+ PCs and 7,000+ crypto wallets via fake job tests, npm malware and VS Code tasks.