BTCC / BTCC Square / Global Cryptocurrency /

North Korean Hackers Target Crypto Ecosystem with Malicious npm Tools

North Korean Hackers Target Crypto Ecosystem with Malicious npm Tools

Author:

Global Cryptocurrency

Published:

2026-03-03 15:41:01

18

3

BTCCSquare news:

North Korean hackers have escalated their attacks on the decentralized finance (DeFi) sector by infiltrating the software supply chain. Reports reveal the deployment of 26 malicious packages in the npm registry, specifically targeting blockchain developers. These packages, disguised as legitimate tools like ether-lint or expressjs-lint, employ typosquatting to trick users into installing malware.

The attackers' StegaBin operation uses advanced steganography to evade detection. Malware hidden within seemingly innocuous Pastebin essays reconstructs command-and-control servers from embedded character patterns. This method allows the theft of sensitive data—private keys, seed phrases, and proprietary code—with alarming sophistication.

By:

VeChain VET Price Analysis: Can the Supply Chain Token Reclaim $0.01 Amid Market Headwinds?

|Square

Get the BTCC app to start your crypto journey

Download on the App Store GEI IT ON Google Play

Get started today Scan to join our 100M+ users

Risk warning: Digital asset trading is an emerging industry with bright prospects, but it also comes with huge risks as it is a new market. The risk is especially high in leveraged trading since leverage magnifies profits and amplifies risks at the same time. Please make sure you have a thorough understanding of the industry, the leveraged trading models, and the rules of trading before opening a position. Additionally, we strongly recommend that you identify your risk tolerance and only accept the risks you are willing to take. All trading involves risks, so you must be cautious when entering the market.

The world’s longest-running cryptocurrency exchange since 2011 © 2011 - 2026 BTCC.com. All rights reserved

All articles reposted on this platform are sourced from public networks and are intended solely for the purpose of disseminating industry information. They do not represent any official stance of BTCC. All intellectual property rights belong to their original authors. If you believe any content infringes upon your rights or is suspected of copyright violation, please contact us at [email protected]. We will address the matter promptly and in accordance with applicable laws.BTCC makes no explicit or implied warranties regarding the accuracy, timeliness, or completeness of the republished information and assumes no direct or indirect liability for any consequences arising from reliance on such content. All materials are provided for industry research reference only and shall not be construed as investment, legal, or business advice. BTCC bears no legal responsibility for any actions taken based on the content provided herein.