Supply Chain Hackers LofyGang Behind Hundreds of Malicious Packages

Checkmarx Labs reports that an organized Brazilian cybercriminal group called LofyGang published ~200 malicious open-source packages (linked to thousands of supply-chain attacks) across ecosystems like GitHub and NPM, using techniques such as starjacking and typosquatting and hiding malicious payloads in secondary dependencies; the group monetizes stolen credit cards and account data via Discord/YouTube communities, and Checkmarx published IOCs and tracking resources to map the campaign.