BTCC / BTCC Square / Global Cryptocurrency /
North Korean Hackers Target Crypto Devs Through Open-Source Software Hub

North Korean Hackers Target Crypto Devs Through Open-Source Software Hub

Published:
2025-10-15 22:31:02
4
2
BTCCSquare news:

North Korean state-sponsored hackers have infiltrated the npm registry, a critical repository for JavaScript developers, in a campaign dubbed "Contagious Interview." Over 300 malicious code packages were uploaded, masquerading as harmless Web3 and crypto development tools. Once installed, the malware steals credentials, browser data, and cryptocurrency wallet keys.

The attackers posed as tech recruiters, specifically targeting blockchain and Web3 developers. This supply-chain attack highlights npm's vulnerability as a backbone of modern web infrastructure—and the growing sophistication of state-backed cyber threats.

|Square

Get the BTCC app to start your crypto journey

Get started today Scan to join our 100M+ users

All articles reposted on this platform are sourced from public networks and are intended solely for the purpose of disseminating industry information. They do not represent any official stance of BTCC. All intellectual property rights belong to their original authors. If you believe any content infringes upon your rights or is suspected of copyright violation, please contact us at [email protected]. We will address the matter promptly and in accordance with applicable laws.BTCC makes no explicit or implied warranties regarding the accuracy, timeliness, or completeness of the republished information and assumes no direct or indirect liability for any consequences arising from reliance on such content. All materials are provided for industry research reference only and shall not be construed as investment, legal, or business advice. BTCC bears no legal responsibility for any actions taken based on the content provided herein.