Security News Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems TheHackerNews Daniel Bender 12 Feb 2026 Share North Korea-linked Lazarus campaign spreads malicious npm and PyPI packages via fake crypto job offers, deploying RATs and data-stealing malware.
