Product
Rollup
- First Reported
- Jul 3, 2026
- Latest Reported
- Jul 3, 2026
Reported Context (1)
- North Korean-linked threat actors have been using fake Rollup polyfill npm packages to deliver layered malware that enables remote access, credential theft, and data collection from developer environments. North Korea-Linked Actors Use Fake Rollup npm Packages to Steal Developer Secrets
Malware (2)
People (1)
Threat Actors (1)
MITRE ATT&CK (13)
Vendors (4)
Products (8)
Tools (1)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.