North Korea's Moonstone Sleet Widens Distribution of Malicious Code

Researchers observed a North Korean APT, Moonstone Sleet, widening its distribution of malicious npm packages in public registries to poison the open-source software supply chain; the actor uses single-package installers that execute payloads on install, has added obfuscation and Linux targeting, and is distinct from Lazarus in its packaging and delivery methods, posing increased risk to developers and consuming organizations.