North Korean Hackers Exploit 67 Malicious npm Packages to Spread XORIndex Malware

The Socket Threat Research Team has discovered a new software supply chain attack that uses a malware loader called XORIndex that had not been previously reported, marking a major uptick in North Korean cyber operations. This activity builds on the Contagious Interview campaign previously detailed in June 2025, which involved the HexEval Loader. The adversaries, […]

The post North Korean Hackers Exploit 67 Malicious npm Packages to Spread XORIndex Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.