ReversingLabs Links Malicious npm Packages in Claude Opus Code Commits to North Korean Group

According to ReversingLabs (cybersecurity research firm), the PromptMink campaign inserted malicious npm (Node.js package manager) packages into openpaw-graveyard and later shifted to a compiled Rust payload for Linux and Windows persistence.

Summary

verifying reliability

Terms & Concepts

No specialized terms available for this topic.