Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

2026-06-30 (Back to Inventory)

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

Author(s): Yair Benamou
Organization: JFrog Security

Open article directly Open article on Archive.org

2026-06-24 ⋅ JFrog Security ⋅ Guy Korolevski, Yair Benamou
Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer
JADESNOW

2026-06-22 ⋅ JFrog Security ⋅ Yair Benamou
From PostCSS Masquerading to Windows RAT
PylangGhost

Propose Change Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

Related Articles

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills