Operation Dream Job is evolving once again, and now comes through malicious dependencies on bare-bones projects.

North Korean state-sponsored hackers have uploaded malicious packages to the PyPI (Python Package Index) repository, camouflaging one of them as a VMware vSphere connector module named vConnector. The ...

North Korea-linked Lazarus campaign spreads malicious npm and PyPI packages via fake crypto job offers, deploying RATs and data-stealing malware.

Python developers working on Mac devices are being targeted by North Korean hackers once again experts have warned. A report from cybersecurity researchers Unit 42 has claimed the attacks are, at ...

Japan's Computer Security Incident Response Team (JPCERT/CC) is warning that the notorious North Korean hacking group Lazarus has uploaded four malicious PyPI packages to infect developers with ...