Threat Actor
DPRK
- First Reported
- Mar 6, 2026
- Latest Reported
- May 21, 2026
Reported Context (2)
- Identified in the episode as the threat actor behind the March Axios compromise; three npm packages tied to that actor reportedly harvested developer credentials. Podcast Reviews npm Package Attacks and a Poisoned VS Code Extension
- OpenSourceMalware attributed the repository compromise and broader campaign to DPRK, citing links to earlier incidents and BeaverTail. Neutralinojs Repositories Hit in Supply-Chain Attack Deploying BeaverTail Malware
Malware (2)
People (5)
Threat Actors (3)
MITRE ATT&CK (10)
Vendors (4)
Products (10)
Tools (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.